Build specification

Access, data and rules#

• Public without sign-in: FND 100 and certificate verification pages only. Everything else is served after sign-in, by role, with a one-time code by email, as in the product. An academy account never creates a product account.
• Accounts: public learners register themselves; customers are invited by their admin or at onboarding; partners by the partner programme owner once their agreement is signed; sales team and founders by the academy owner.
• Never public: question banks, answer keys, marking guides and the search index. Exams are scored on the server; no key reaches the browser.
• Refreshers, delta notices and expiry reminders are service emails; marketing needs a separate unticked opt-in. Karl Foster reviews the privacy notice before public registration opens. UK hosting; recordings internal only, retention set by Karl Foster; WCAG 2.2 AA; captions on recordings.

Rules. (1) A course opens when its prerequisites are complete; it is complete when its assessment is passed or, with none, every lesson check is done. (2) "Two consecutive passes" means two passes on the same gate with no fail between. (3) Certificate status: active; delta due when a release touching it is published; suspended when the delta window closes without a pass; lapsed at expiry; revoked by the academy owner for a claims breach. (4) A referral link is active only while the partner's certificate is active; the partner register holds the status (to be confirmed with Neil Flannery). (5) Three attempts per exam, then a 30-day wait (recommendation).

Content and platform (D26)#

Addresses follow codes (/fnd/103/m2/l3; certificates at /cert/{id}). Every page shows its role label and stamp. Lessons are text files in a version-controlled repository, each opening with code, title, roles, edition, release stamp, sources, claim colours, decision tags, owner role, last review, prerequisites and legal sign-off. The build refuses to publish a lesson flagged for legal sign-off without a sign-off date.

Three platform options: A, a static site plus a small record service for sign-in, scoring and certificates (recommended for version 1: cheapest, fastest to update, content stays in our files); B, an off-the-shelf learning platform for small firms (pricing, UK data residency and role-play features unverified); C, an enterprise enablement platform (too heavy for a team with no salesperson). Gates in version 1 run over a video call with an assessor, recorded with consent and scored in the drill form. AI role-play is a later option, measured against our own before and after because every figure found is vendor data. Nothing from the academy writes to LinkedIn except a learner's own choice to add a certificate.