Four-eyes publication control

One candidate, one immutable review target

Research and ingestion may create candidates, but they cannot publish them. The candidate is normalized and hashed before review. Every subsequent verdict must name the same candidate hash, so a text or source change invalidates all earlier approvals.

Two eyes for logic

The logic authority verifies structure, claim identifiers, evidence classes and source mappings. A separate logic witness independently resolves the declared evidence and records its observed hash. The two lanes use distinct reviewer identities and neither may be the candidate author.

Two eyes for content

The content editor checks respectful language, separation of tradition from mechanism and clinical outcome, commercial independence and a visible safety boundary. A separate rendered-page witness then checks canonical metadata, claim and source identifiers, operator identity, support address and the final output rather than the draft alone.

Automatic publication without approval clicks

Normal daily additions require no Founder approval click. Publication proceeds only when all four lanes approve the same hash. External contracts, payment authority and licensed practitioner identity remain separate authority boundaries and are never inferred by the publication system.

Failure, rollback and evidence

Any missing or conflicting verdict quarantines the candidate. Approved output is copied into a new immutable release, validated, activated through an atomic symlink switch and tested through public HTTPS. A failed served check restores the previous release and writes a blocker receipt.

Machine-readable reviewed statements

Sources and governing contracts

• POL-MH-DAILY-FOUR-EYES — Metatron Marketing Ltd, Metatron Health daily four-eyes publication policy.