Every meaningful decision in this product, the rationale, and the alternatives we rejected. If you disagree, we want to hear about it.
1. Battery-powered operation - uses coin-cell battery replaceable in under a minute, no tools required; batteries available for purchase with cost+10 percent markup from official stores for up to 7 years. [rule: 7yr-p 7yr-parts] 2. Dual-mode system architecture - Mode 1 operates as standalone tracker; Mode 2 integrates with Apple HomeKit and Google Home; Mode 3 connects exclusively to the WanderVerse Hub network. [rule: dual-mode] 3. Zero cloud dependency by default - all data is stored locally on the device, no internet connection needed for basic functionality. Users can opt-in to sync data with their accounts using end-to-end encryption keys they control. [rule: zero-cloud] 4. Identity-aware features - includes covert and duress modes to protect user privacy and safety; a panic wipe function clears all stored data immediately if necessary. [rule: identity-aware] 5. Ambassador-assembled model - each unit is assembled by trained Ambassadors who are also engraved with their signature inside the device, e ensuring transparency in manufacturing provenance. [rule: ambassador] 6. Saffron aesthetic design - matte finish exterior without any brand l logos or markings; instead, a subtle saffron accent LED and "WanderTrack" e etched in saffron color on the underside of the casing. [rule: saffron] 7. Dual-sourced hardware components - primary use of ESP32-S3-WROOM-1 f for host MCU tasks with Nordic nRF52840 as a secondary option to avoid vend vendor lock-in and ensure supply chain resilience. [rule: dual-source] 8. Planned revenue split - 60 percent of the sale price would go to Ambassador wages, 10 percent goes into the PrideFund HYSA for long-term investments in LGBTQ+ communities, and 30 percent supports WWP non-profit initiatives. [rule: 60/30/10] 9. Physical hardware kill-switch - includes a latching SPDT switch with a saffron status LED to indicate operational mode; this allows users t to quickly disable the device if needed for security or privacy reasons. [r [rule: identity-aware] 10. Local-first data management - prioritizes local storage and processing of all collected data, ensuring that no user information is tran transmitted off-device unless explicitly chosen by the user through an opt- opt-in cloud sync feature. [rule: zero-cloud]