Signature
The eight invisibility rules — every surface our name could leak through
Most white-label promises stop at "we won't tell anyone". A subcontractor's name rarely escapes through a person — it escapes through a staging subdomain, a plugin header or a commit email. Here is every surface, including the one we can't close alone.
01 · The proposal
Your template, logo and pricing. We never publish suggested resale rates — that would put a floor under your pricing.
02 · The repository
Your GitHub, GitLab or Bitbucket organisation from the first commit. Never "transferred later" — a transfer leaves a history.
03 · Documentation
READMEs, runbooks and licence register in your template, written to forward to your client unedited.
04 · Staging URLs
A subdomain on your domain or your client's — never a URL anyone could search and find us behind.
05 · The ticket system
Your Jira, Linear, ClickUp or Basecamp, on accounts you create and revoke. No parallel board to glimpse in a screen share.
06 · Deploy notifications
Alerts reach your Slack from your CI, under your app name. A bot called "canopus-ci" undoes the other seven rules in one message.
07 · Plugin and theme headers
The Author and Plugin URI fields in every plugin and theme name your agency — WordPress prints them in the admin plugin list.
08 · What we can't close alone
Commit emails on a repository we don't control. Issue us accounts on your domain and it closes; otherwise it stays a stated risk.
Every rule is configuration you can inspect on a call before signing. Comparing partners? Ask rule 07: whose name goes in the plugin header? It's the leak that survives longest — in your client's WordPress admin for the life of the site.