Skip to content
PETROVA

Traceo's legal pages list Hostinger as an email sender, and the re-rendered copy is pinned by hash

rank: decision outranks: []

Section titled “rank: decision outranks: []”

Traceo’s legal pages list Hostinger as an email sender, and the re-rendered copy is pinned by hash

Section titled “Traceo’s legal pages list Hostinger as an email sender, and the re-rendered copy is pinned by hash”

Date: 2026-11-08 Status: closed Supersedes: 2026-11-01-chronicle-legal-domain-chronicle-events.md (PARTIAL: replaces only the countersigned manifest sha256. The chronicle copy and its pages.json hash stand.) and 2026-10-30-legal-pages-rendered-from-commercial-facts.md (PARTIAL: replaces only the countersigned traceo privacy.md, subprocessors.md and pages.json hashes. The renderer, the pinning rule and every other page stand.) Superseded-by: none — current MR-compliance: MR-4, MR-7, MR-9

Context

Section titled “Context”

2026-11-07-estate-mail-airlock-stays-on-resend.md (closed, countersigned 2026-11-07) ruled R5: Hostinger is added to estate/commercial-facts.yaml now, with one approved row, and Resend stays listed because airlock still sends through it. traceo sends its own transactional mail over Hostinger SMTP since the 2026-11-03 cutover (traceo ADR 0155), so its subprocessors page is missing a provider that receives customer email addresses.

traceo publishes pages.json only when its sha256 matches the manifest entry (2026-10-30-legal-pages-rendered-from-commercial-facts.md). A facts change therefore needs a re-render and a new countersign before the app can show it.

Decision

Section titled “Decision”

  1. estate/commercial-facts.yaml gains the R5 row verbatim, after Resend, so the two email senders sit together (estate/commercial-facts.yaml:30):

    - name: Hostinger
      purpose: Sends account, sign-in and verification email
      location: European Union (Lithuania)
      applies_to:
        - traceo

  2. petrova legal-render is re-run, and its effective date stays 2026-10-30 (the renderer’s default). Only traceo files change:

    • estate/legal/traceo/subprocessors.md: one new table row, Hostinger.
    • estate/legal/traceo/privacy.md: “International transfers” names Hostinger (European Union (Lithuania)) after Resend.
    • estate/legal/traceo/pages.json: the same two changes as data.
    • estate/legal/manifest.json: facts_sha256 and the three traceo hashes above.

    Every chronicle file, and traceo’s terms.md and refunds.md, keep the byte-identical hashes countersigned on 2026-10-30 and 2026-11-01.

  3. This countersign approves the copy as rendered at manifest sha256 1f34d2b2cfe30cda735ba5f13b836d348d42236b008897f21ceab92203ac2696 (traceo pages.json sha256 8ce04012891ef6391142cc8cedcac6278e91c067f15aa987e792073bcfea6f91), for publication on traceo.cloud.

Alternatives considered

Section titled “Alternatives considered”
  • Re-date the pages to 2026-11-08. The effective date is one value for the whole manifest, so this would change every chronicle hash and force chronicle to republish copy whose text has not changed. Not chosen by the agent; FLIGHT may ask for it before signing, and the PR is then re-rendered with --effective.
  • Replace Resend with Hostinger. R1 keeps airlock on Resend, so Resend still receives sign-in email for every app.
  • Add Hostinger for every app. R5’s approved row applies to traceo only; chronicle signs in through airlock, which stays on Resend.

Consequences

Section titled “Consequences”

For code:

  • A follow-up PR in traceo-cloud/traceo-mcp-server vendors the new pages.json and sets its pinned hash to 8ce04012…. It is opened only after this doc is countersigned.

For docs:

  • None beyond this doc. estate/legal/ stays generated.

For in-flight phases:

  • MAIL session (2026-11-07-estate-mail-airlock-stays-on-resend.md, R5): this is the legal-facts change that ruling asked for.

For invariants:

  • None.

What this decision does NOT do

Section titled “What this decision does NOT do”
  • It does not change any other fact, page text or processor.
  • It does not add nestr. nestr web also sends through Hostinger (hello@nestr.tools), but nestr is not an app in the facts file and its legal page has not been checked. That needs its own ruling.
  • It does not touch chronicle’s copy.

References

Section titled “References”
  • docs/decisions/2026-11-07-estate-mail-airlock-stays-on-resend.md (R1, R5)
  • docs/decisions/2026-10-30-legal-pages-rendered-from-commercial-facts.md
  • docs/decisions/2026-11-01-chronicle-legal-domain-chronicle-events.md
  • estate/commercial-facts.yaml:30, estate/legal/manifest.json

Sign-off

Section titled “Sign-off”
  • Subagent: Claude Opus 5.5, MAIL session worker, 2026-11-08 (facts change and re-render in the same PR; legal-render --check clean, legal and commercial-facts tests 45/45)
  • Human countersign — the traceo copy at the manifest sha256 above, with Hostinger listed, for publication on traceo.cloud — flight@arno.host, 2026-11-08 (jzero.run T1)

Countersigned by human:flight@arno.host on 2026-11-08 at jzero.run T1 — box ticked in commit e2eb8be8, authored as alex@devarno.cloud. FLIGHT confirmed the signature to the agent on 2026-11-08. Status flipped open→closed on 2026-11-08 by an agent as scribe (MR-7).