Six commitments. Held without exception.

Every program, profile, engagement, and offer visible on PROVUS exists because an authorised person at an institution actively approved it. This is enforced at the system level: there is no path where something appears without an approval record.

When approval ends — whether by suspension, withdrawal, or expiry — the item disappears from student-facing surfaces immediately. The platform fails closed by default: if approval cannot be verified, the item is hidden.

In practice: a student who sees an adviser's name on PROVUS knows that adviser was approved by someone at an institution who had the authority to approve them.

Most platforms maximise the options available to users. PROVUS deliberately minimises them. What you see on PROVUS is what an institution has actively approved for your context — not everything that exists, not everything that's been paid to be visible, not everything an algorithm thought might be relevant.

This is a design choice with a real trade-off: PROVUS will have fewer programs and fewer advisers than other platforms, especially at launch. We're choosing depth over breadth, on purpose.

In practice: a student looking at PROVUS sees a small number of approved options, with the time to consider each one properly.

PROVUS does not display ratings, reviews, social proof, popularity metrics, or any other aggregated trust signal. Trust comes from one source only: a named institution standing behind what's visible.

This means PROVUS will never feel "lively" the way platforms full of star ratings do. We've chosen this deliberately, because aggregated trust signals are easily manipulated and structurally unfair to advisers and programs that are good but small.

In practice: when you see something on PROVUS, the trust signal is "[institution name] approved this," not "4.8 stars from 327 reviews."

PROVUS gives every participant a clear role with clear boundaries. Institutions govern. Advisers deliver. Students & career seekers decide. Partners coordinate bounded programs. The boundaries are not in a terms-of-service document — they are enforced by the platform.

This matters because most reputation systems fail when roles get blurred — when advisers start governing themselves, when institutions start selling, when students get manipulated by algorithmic recommendation. PROVUS prevents that structurally.

In practice: an institution cannot show a student a program it has not approved. An adviser cannot make themselves visible without institutional endorsement. A student cannot be steered toward something by anyone other than a human adviser.

PROVUS is built for sustained institutional use, not viral growth. We are not optimising for early-stage metrics — sign-ups, time-on-site, engagement loops. We're optimising for a platform that institutions can trust for the next twenty years.

This shows up in many small ways: no urgency mechanics, no growth hacks, no dark patterns, no third-party retargeting, no marketing automation, no behavioural data products. It also shows up in big ways: the platform is structured to fail closed, the audit trail is immutable, the privacy posture is uncompromising.

In practice: PROVUS will grow more slowly than platforms optimised for hockey-stick growth. That is the point, not a flaw.

Every critical decision on PROVUS leaves a trace. Approvals, suspensions, engagements, withdrawals, governance changes — all recorded with the actor, timestamp, and scope of the decision. Nothing is implicit.

The audit trail is built into the system, not bolted on. It is queryable by authorised institutional roles, exportable for compliance, and immutable: no one can quietly change history.

In practice: if a question is ever asked about who approved what, when, and why, the answer is available — to the institution, to the regulator, to the auditor.