Three Laws
CI-enforced runtime laws for the Nelson distribution platform.
These laws are non-negotiable. Continuous integration fails the build if they are violated.
1. No GCLID mixing
Attribution writes must never mix Google Click IDs across unrelated sessions or sources. Every attribution path calls the integrity check before write.
2. BigQuery before CRM
BigQuery is the event truth. On every lead action, the platform writes to BigQuery before any CRM side effect. CRM is a projection, not the source of record.
3. PII boundary (sha256)
Personally identifiable information is hashed or redacted before it leaves the server on non-allowlisted paths. Raw PII may only leave through explicit, audited delivery paths (for example telephony or CRM delivery) with destination, purpose, and field allowlists.
Captive seam (Law 4 in agent rules)
AmFam policyholder data never leaves AmFam systems. Agency systems see lead signals, call signals, hashed identifiers, and bind attestations — not carrier policy, quote, billing, or claim references.
See also: Two Environments.