diff --git a/docs/clients/overcome-fitness/threat-register-v1.md b/docs/clients/overcome-fitness/threat-register-v1.md index 465cdaa..572d3a7 100644 --- a/docs/clients/overcome-fitness/threat-register-v1.md +++ b/docs/clients/overcome-fitness/threat-register-v1.md @@ -12,70 +12,70 @@ No speculation. No invented gaps. No solution language. ## Threat Entries ### Threat ID: T-001 -- **Title:** Website navigation links observed returning dead pages +- **Title:** Website paths observed returning dead pages - **Signal Source:** Website (overcomefitnesscp.com) -- **Evidence Snippet:** Prior audit observed primary navigation links (including /trainers, /plans, /power-cycle) returning HTTP 404. -- **Data Recency:** 2025-08 — requires fresh re-snapshot +- **Evidence Snippet:** As of 2026-08-02, `/trainers`, `/plans`, and `/power-cycle` return HTTP 404. Working paths include `/plans-pricing` and `/copy-of-home`. +- **Data Recency:** 2026-08-02 (freshness check) - **Estimated Severity:** Major - **Verification Tier:** Tier 2 -- **Notes / Context:** Concrete technical observation from prior audit. Must be re-verified before any severity or tier upgrade. +- **Notes / Context:** Confirmed current. Broken paths create dead ends for users following those URLs. - **Human Decision:** Pending ### Threat ID: T-002 -- **Title:** No booking integration visible on public GMB or website surfaces -- **Signal Source:** GMB public surface + website -- **Evidence Snippet:** Prior audit observed no booking widget on GMB and no detected booking system on the website. Public conversion path appeared contact-form / phone oriented. Related website CTA path was also observed returning 404. -- **Data Recency:** 2025-08 — requires fresh re-snapshot +- **Title:** No booking integration visible on public website surfaces +- **Signal Source:** Website public surface +- **Evidence Snippet:** As of 2026-08-02, no booking system detected on the public website. Contact is form/phone oriented. Pricing page exists and includes a free-pass offer plus contact form. +- **Data Recency:** 2026-08-02 - **Estimated Severity:** Major - **Verification Tier:** Tier 2 -- **Notes / Context:** Booking availability behind the scenes is unknown without owner confirmation. +- **Notes / Context:** Whether a booking tool exists behind the scenes is unknown without owner confirmation. GMB booking state remains separately unresolved. - **Human Decision:** Pending ### Threat ID: T-003 -- **Title:** Large personal TikTok audience shows limited clear business attribution -- **Signal Source:** TikTok @byronslavin (public profile) -- **Evidence Snippet:** Prior audit observed substantial public following on a personal trainer-oriented profile. Public bio/handle/content surface showed limited or no clear Overcome Fitness business branding; link destination appeared personal-trainer oriented. -- **Data Recency:** 2025-08 — requires fresh re-snapshot +- **Title:** Personal TikTok audience shows limited clear business attribution +- **Signal Source:** TikTok @byronslavin + website footer/social links +- **Evidence Snippet:** Live site (2026-08-02) links to @byronslavin. Prior public profile observation showed personal trainer/athlete orientation with limited clear Overcome Fitness business branding on the public surface. +- **Data Recency:** Link confirmed 2026-08-02; profile metrics/details prior 2025-08 - **Estimated Severity:** Major - **Verification Tier:** Tier 2 -- **Notes / Context:** Potential warm audience exists, but public attribution to the business was weak at time of observation. Current metrics and relationship need confirmation. +- **Notes / Context:** Relationship and current branding need confirmation. - **Human Decision:** Pending ### Threat ID: T-004 - **Title:** Multiple related Instagram handles observed -- **Signal Source:** Instagram public profiles -- **Evidence Snippet:** Two related handles observed (@overcomefitnesscp and @overcometrainer), linked from different public surfaces. Deeper content/engagement metrics incomplete. -- **Data Recency:** Mixed (handles 2025-08; partial follower observation 2026-07) +- **Signal Source:** Instagram public profiles + live website links +- **Evidence Snippet:** Live site links to @overcometrainer. Related handle @overcomefitnesscp also observed in prior notes. Deeper content/engagement metrics incomplete. +- **Data Recency:** Live link 2026-08-02; prior handle observations 2025-08 / 2026-07 - **Estimated Severity:** Major - **Verification Tier:** Tier 2 -- **Notes / Context:** Dual handles can fragment authority; actual impact depends on content and audience split, which are not fully known. +- **Notes / Context:** Dual handles can fragment authority; actual impact depends on content and audience split. - **Human Decision:** Pending ### Threat ID: T-005 -- **Title:** Possible Facebook NAP / city label mismatch -- **Signal Source:** Facebook page metadata + website/directories -- **Evidence Snippet:** Prior observation of Facebook page city label as Shingle Springs while website/directories list Cameron Park. -- **Data Recency:** 2025-08 — requires fresh re-snapshot +- **Title:** Facebook city label mismatch vs website/directories +- **Signal Source:** Facebook public search label + website +- **Evidence Snippet:** As of 2026-08-02, Facebook public search title still labels the page as Shingle Springs CA while website/directories list Cameron Park. +- **Data Recency:** 2026-08-02 - **Estimated Severity:** Major - **Verification Tier:** Tier 2 -- **Notes / Context:** Conflicting location signals can affect local consistency. Must be re-verified on current page settings. +- **Notes / Context:** Conflicting location signals can affect local consistency. Full page settings not inspected beyond public search label. - **Human Decision:** Pending ### Threat ID: T-006 - **Title:** Weak or absent Yelp presence under current brand name - **Signal Source:** Yelp public search -- **Evidence Snippet:** Prior public search did not establish a strong claimed listing under Overcome Fitness. -- **Data Recency:** 2025-08 +- **Evidence Snippet:** Strong current listing under Overcome Fitness not established in public search. Historical closed listing exists under a different address. +- **Data Recency:** 2026-08-02 / prior notes - **Estimated Severity:** Major - **Verification Tier:** Tier 2 -- **Notes / Context:** Fresh confirmation required. +- **Notes / Context:** Fresh confirmation still thin. - **Human Decision:** Pending ### Threat ID: T-007 -- **Title:** Limited lead-capture surface beyond bottom-of-funnel contact form +- **Title:** Limited lead-capture surface beyond contact form / phone - **Signal Source:** Website -- **Evidence Snippet:** Prior audit observed contact form as the primary visible conversion path, with limited above-the-fold booking/trial capture mechanisms. -- **Data Recency:** 2025-08 — requires fresh re-snapshot +- **Evidence Snippet:** As of 2026-08-02, public conversion path is primarily contact form and phone. Pricing page includes a free-pass offer, but no integrated booking flow was detected. +- **Data Recency:** 2026-08-02 - **Estimated Severity:** Major - **Verification Tier:** Tier 2 - **Notes / Context:** Structural observation only. @@ -88,7 +88,7 @@ No speculation. No invented gaps. No solution language. - **Data Recency:** 2025-08 - **Estimated Severity:** Minor - **Verification Tier:** Tier 2 -- **Notes / Context:** May be intentional or legacy. Impact depends on current state and ownership structure. +- **Notes / Context:** May be intentional or legacy. Impact depends on current state. - **Human Decision:** Pending ### Threat ID: T-009 @@ -108,25 +108,26 @@ No speculation. No invented gaps. No solution language. - **Data Recency:** 2025-08 - **Estimated Severity:** Minor - **Verification Tier:** Tier 2 -- **Notes / Context:** Low immediate impact channel for this vertical; recorded for completeness. +- **Notes / Context:** Low immediate impact channel; recorded for completeness. - **Human Decision:** Pending ## Summary - Total threats drafted: 10 - Tier 1 (Verified): 0 - Tier 2 (Indicative): 10 -- Critical severity used: 0 (all elevated findings held at Major while data remains stale/Tier 2) -- Several entries explicitly require freshness re-verification before lock or tier upgrade +- Current as of 2026-08-02: T-001, T-002, T-005, T-007 (and partial support for T-003/T-004 via live links) +- Still open / higher uncertainty: GMB completeness (affects T-002/T-008 context), deeper social metrics ## Human Review Gate +- [x] Fresh public checks completed for key website paths and FB search label (2026-08-02) - [ ] Every entry is backed by real data from the inventory - [ ] Every entry has a Data Recency note - [ ] Every entry has a Verification Tier -- [ ] Stale observations are clearly flagged +- [ ] Stale observations remain clearly flagged - [ ] No industry-stat or solution language remains - [ ] Human has recorded a decision on each entry - [ ] No invented or speculative threats remain -Once this gate is signed off (and freshness checks completed where required), the Threat Register may be **Locked**. +Once this gate is signed off (and GMB gap is either resolved or explicitly accepted as blocker), the Threat Register may be **Locked**. **Reviewer sign-off:** _________________ Date: _________