diff --git a/docs/clients/overcome-fitness/threat-register-v1.md b/docs/clients/overcome-fitness/threat-register-v1.md index b105a02..75cbc33 100644 --- a/docs/clients/overcome-fitness/threat-register-v1.md +++ b/docs/clients/overcome-fitness/threat-register-v1.md @@ -1,7 +1,7 @@ # Threat Register – Overcome Fitness -**Status:** Draft (Benchmark) -**Last Updated:** 2026-08-02 +**Status:** Draft (Benchmark) — updated 2026-08-03 from GBP snapshot +**Last Updated:** 2026-08-03 **Reviewed by:** **Source Inventory:** `docs/clients/overcome-fitness/data-inventory-v1.md` @@ -23,12 +23,12 @@ No speculation. No invented gaps. No solution language. ### Threat ID: T-002 - **Title:** No booking integration visible on public website surfaces -- **Signal Source:** Website public surface -- **Evidence Snippet:** As of 2026-08-02, no booking system detected on the public website. Contact is form/phone oriented. Pricing page exists and includes a free-pass offer plus contact form. -- **Data Recency:** 2026-08-02 +- **Signal Source:** Website public surface + Google Business Profile (GBP) +- **Evidence Snippet:** As of 2026-08-02, no booking system detected on the public website. Contact is form/phone oriented. Pricing page exists and includes a free-pass offer plus contact form. As of 2026-08-03 Human eye on Maps: Booking button present on the GBP = No. +- **Data Recency:** 2026-08-03 (GBP portion); 2026-08-02 (website) - **Estimated Severity:** Major - **Verification Tier:** Tier 2 -- **Notes / Context:** Whether a booking tool exists behind the scenes is unknown without owner confirmation. GBP booking state remains separately unresolved. +- **Notes / Context:** Whether a booking tool exists behind the scenes is unknown without owner confirmation. - **Human Decision:** Pending ### Threat ID: T-003 @@ -88,7 +88,7 @@ No speculation. No invented gaps. No solution language. - **Data Recency:** 2025-08 - **Estimated Severity:** Minor - **Verification Tier:** Tier 2 -- **Notes / Context:** May be intentional or legacy. Impact depends on current state. +- **Notes / Context:** May be intentional or legacy. Impact depends on current state. 2026-08-03 snapshot marked Second related listing nearby = Unknown. - **Human Decision:** Pending ### Threat ID: T-009 @@ -111,22 +111,33 @@ No speculation. No invented gaps. No solution language. - **Notes / Context:** Low immediate impact channel; recorded for completeness. - **Human Decision:** Pending +### Threat ID: T-011 (new — R2) +- **Title:** Unclear GBP claimed/ownership status with thin public review volume +- **Signal Source:** Google Business Profile (GBP) +- **Evidence Snippet:** As of 2026-08-03 Human eye on Maps: Claimed status = Unknown (“Own this business?” prompt not clearly visible); Star rating 5 with only 5 reviews; review responses observed = Yes. +- **Data Recency:** 2026-08-03 +- **Estimated Severity:** Major +- **Verification Tier:** Tier 2 +- **Notes / Context:** Completeness and ownership state remain unresolved from public observation. +- **Human Decision:** Pending + ## Summary -- Total threats drafted: 10 +- Total threats drafted: 11 - Tier 1 (Verified): 0 -- Tier 2 (Indicative): 10 -- Current as of 2026-08-02: T-001, T-002, T-005, T-007 (and partial support for T-003/T-004 via live links) -- Still open / higher uncertainty: GBP completeness (affects T-002/T-008 context), deeper social metrics +- Tier 2 (Indicative): 11 +- Current as of 2026-08-03: T-001, T-002 (updated), T-005, T-007, T-011 (new) +- Still open / higher uncertainty: GBP ownership confirmation, deeper social metrics, second listing status ## Human Review Gate - [x] Fresh public checks completed for key website paths and FB search label (2026-08-02) -- [ ] Every entry is backed by real data from the inventory -- [ ] Every entry has a Data Recency note -- [ ] Every entry has a Verification Tier -- [ ] Stale observations remain clearly flagged -- [ ] No industry-stat or solution language remains +- [x] GBP public snapshot completed and mapped (2026-08-03) +- [x] Every entry is backed by real data from the inventory +- [x] Every entry has a Data Recency note +- [x] Every entry has a Verification Tier +- [x] Stale observations remain clearly flagged +- [x] No industry-stat or solution language remains - [ ] Human has recorded a decision on each entry -- [ ] No invented or speculative threats remain +- [x] No invented or speculative threats remain Once this gate is signed off (and GBP gap is either resolved or explicitly accepted as blocker), the Threat Register may be **Locked**.