Maintainer Diligence & Offboarding Specification

This specification outlines the technical, financial, and legal workflow for sunsetting an application through Keelout without transferring legacy source repositories or exposing customer PII prior to definitive execution.

1. Zero-PII Discovery & Synthetic Schema Audit

During Phase 1 diligence, Keelout inspects only aggregate telemetry (30/60/90-day active session counts, route frequency, and database table schemas). Our local CLI sanitizer generates a deterministic synthetic fixture of your schema so potential category acquirers can build their ingestion mapper without touching raw customer records.

2. Escrow & Milestone Disbursement Structure (70 / 30)

• 70% Rolling Milestone Payouts: Disbursed bi-weekly as verified active users either claim partner migration credits or complete authenticated archive exports during the 60–90 day transition window.
• 30% Completion Holdback: Released at T-Zero upon verification of domain routing rules (if applicable) and execution of the NIST SP 800-88 Rev. 1 Purge Certificate.

3. The Dynamic Edge Bridge (v1/bridge.js)

Maintainers do not build bespoke migration UIs. You embed a single script tag (<script src="https://cdn.keelout.com/v1/bridge.js"></script>) in your application header. The script renders an accessible, co-branded transition notice providing users with 1-click GDPR Article 20 data portability and opt-in switcher onboarding.

4. NIST SP 800-88 Sanitization & 60-Day Domain ROFR

At T-Zero, production volumes, replicas, and automated snapshots are cryptographically purged in accordance with NIST SP 800-88 Rev. 1 guidelines, and a signed SHA-256 attestation certificate is issued to the maintainer. If a domain is included in the transition, it is bound by the Keelout Anti-Slop Covenant and a perpetual 60-day Right of First Refusal (ROFR) at $0 reclamation cost.