Phase 222

Lead Contact Permission Gate

The gate that decides whether a future assigned public lead may be contacted, through which channel, with what script, and under which consent.

Design decision

Contact permission is not contact

This phase keeps FAEDA disciplined: an assigned lead can only move toward contact when consent, channel, script, timing, masking, and reviewer authority are all clean.

Phase boundary

Permission gate, no contact runtime

Phase 222 designs the lead contact permission gate only. It does not call, message, email, notify, visit, assign CRM tasks, create accounts, verify identity, approve onboarding, activate listings, create orders, create payments, create wallets, create commissions, or sync data to partners.

Channels

6

Sends

0

CRM

0

Permission outcomes

no send

Permission outcome

Permit contact draft

Assignment is approved, consent matches the channel, message purpose is narrow, and no privacy hold exists.

Prepare a future contact draft with channel, purpose, script, expiry, and reviewer evidence.

No send, call, WhatsApp, SMS, email, push, visit, or CRM task in this phase.

Permission outcome

Require consent refresh

Consent is missing, expired, vague, channel-mismatched, or captured under older wording.

Mark the packet as needing a future consent refresh path.

No follow-up contact until the refresh method is approved later.

Permission outcome

Limit channel

The visitor approved one channel but not another, such as email but not phone.

Restrict any future contact draft to the approved channel only.

No channel switching, fallback calling, or field visit workaround.

Permission outcome

Hold for quiet hours

The proposed contact time violates quiet hours, prayer-sensitive timing, local norms, or visitor preference.

Hold contact until a safe time window is available.

No urgent-looking message unless a real emergency workflow exists later.

Permission outcome

Escalate contact risk

Sensitive, legal, financial, health, identity, child, harassment, or safety content is involved.

Escalate to privacy, compliance, or supervisor review before contact may be drafted.

No raw content to FAEDA Team, sales, partner, or founder observer surfaces.

Permission outcome

Reject contact request

The contact purpose is sales pressure, spam, unsafe, out of scope, or not tied to the original lead intent.

Reject the contact proposal with a safe reason and keep the lead packet protected.

No blacklist, punitive scoring, or public accusation.

Channel rules

Every channel needs its own permission

Phone call

Only if phone contact consent exists, identity-safe script exists, and call window is approved.

No cold call, repeated call, recorded call claim, OTP request, or pressure script.

SMS

Only short consent-safe notice with no sensitive details and clear opt-out wording.

No marketing blast, deep link with private token, payment request, or fake urgency.

WhatsApp

Only if WhatsApp consent is present and message is plain, minimal, and role-scoped.

No group add, image/doc request, voice note pressure, catalog spam, or payment link.

Email

Only if email consent exists and the body avoids private internal details.

No attachments, exports, invoices, credentials, account links, or hidden tracking claim.

In-app notification

Only after a future account/session exists and backend confirms customer scope.

No notification to anonymous lead, no fake account, no cross-customer exposure.

FAEDA Team assisted follow-up

Only as a future approved field-support workflow with masked context and area scope.

No unapproved visit, no exact-address exposure, no random freelancer handoff.

Consent states

Future backend-safe consent language

CONSENT_VALID_CHANNEL_MATCH

Consent exists for the exact channel and purpose.

CONSENT_MISSING

No operational contact consent exists.

CONSENT_EXPIRED

Consent exists but is too old for safe contact.

CONSENT_REVOKED

The visitor opted out or withdrew consent.

CONSENT_CHANNEL_MISMATCH

Consent exists for a different channel only.

CONSENT_PURPOSE_MISMATCH

Consent exists but not for this role, message, or follow-up purpose.

CONSENT_SENSITIVE_HOLD

Sensitive data requires privacy review before any contact draft.

CONSENT_ACCOUNT_REQUIRED

The channel requires a future authenticated account/session first.

Contact matrix

Condition to permission to lock

Approved assignment plus valid phone consent

Permission: Permit phone contact draft

Lock: No call placed yet

Approved assignment plus WhatsApp-only consent

Permission: Limit to WhatsApp draft

Lock: No phone fallback

Consent missing

Permission: Require consent refresh

Lock: No message

Consent revoked

Permission: Reject contact request

Lock: No recontact

Sensitive data in lead packet

Permission: Escalate contact risk

Lock: No raw context exposure

Quiet hours active

Permission: Hold for quiet hours

Lock: No urgent wording

Purpose changed from original intent

Permission: Require consent refresh

Lock: No sales expansion

Multiple role lanes

Permission: Separate contact drafts

Lock: No shared private script

Partner/compliance claim

Permission: Compliance review first

Lock: No legal/financial promise

Clean low-risk support query

Permission: Permit contact draft

Lock: Expiry and opt-out required

Message policy

What a future script may and may not say

1Use the minimum necessary words.
2Identify FAEDA clearly without pretending to be a bank, government body, hospital, or law authority.
3Reference only the visitor's own submitted interest, not hidden internal scoring.
4Do not ask for CNIC, OTP, password, bank details, exact address, medical files, payroll files, or payment.
5Do not promise approval, listing, onboarding, loan, wallet, payout, rider job, supplier verification, or order.
6Include a simple opt-out or stop path where the channel supports it.
7Use role-specific scripts: customer, shop, supplier, manufacturer, wholesaler, rider, partner/compliance, or unsure.
8Expire contact drafts if not reviewed within the allowed time window.

Permission bands

Who can ask, approve, mask, block, or observe

Assignment approver

Can request contact permission review after Phase 221 approval.

Contact reviewer

Can approve or reject a channel-specific contact draft policy.

Privacy reviewer

Can mask sensitive context or block contact if privacy risk remains.

Compliance reviewer

Can approve regulated, partner, legal, bank, government, or medical contact language.

FAEDA Team lane owner

Can receive only approved future contact task context, never raw private data.

Founder observer

Can see contact health and risk counts, not raw message bodies or contact details.

No one in this phase

Can send, call, visit, verify, onboard, create CRM work, create accounts, or collect documents.

Contact packet fields

Future evidence shape before sending exists

contactPermissionIdassignmentApprovalIdleadPacketIdroleLanechannelcontactPurposeconsentStatemessageTemplateIdmessagePreviewMaskedallowedContactWindowquietHoursRuleoptOutInstructionprivacyMaskLevelreviewerRoleapprovalOutcomeexpiresAtcreatedAt

Frequency and timing rules

No contact until time, purpose, and consent are clean

P0 No contact

Revoked consent, sensitive hold, blocked data, legal risk, abuse risk, or unsafe message purpose.

Reject contact request or escalate.

P1 Checker required

Partner, government, financial, medical, legal, employment, or high-value business source contact.

Compliance or supervisor checker before draft permission.

P2 Timed contact

Valid consent but current time is quiet, culturally sensitive, too late, or outside visitor preference.

Hold until allowed contact window.

P3 Standard draft

Clean assignment, exact-channel consent, safe purpose, safe script, and opt-out wording.

Permit future contact draft with expiry.

Blocked automation

Contact permission must not automate these

1Auto call, SMS, WhatsApp, email, push, visit, or notify any lead
2Auto create CRM task, sales task, field task, or FAEDA Team assignment
3Auto switch channels after one channel fails
4Auto send payment, wallet, loan, payout, verification, OTP, or document request
5Auto expose contact details, exact addresses, CNIC, bank, medical, payroll, invoice, or file data
6Auto add a lead to marketing campaigns, groups, broadcasts, newsletters, or retargeting lists
7Auto create account, onboarding, listing, RFQ, quote, order, commission, ledger, or partner sync
8Auto count contact permission as conversion, trust score, or approval

Review stops

When reviewers must stop instead of drafting contact

1Stop if the contact purpose is not the same as the lead's original intent.
2Stop if the channel is not explicitly consented.
3Stop if the message requests sensitive documents or payment.
4Stop if a reviewer cannot explain why contact is necessary.
5Stop if the assignee would receive more context than needed.
6Stop if the visitor is vulnerable, underage, distressed, or in a regulated matter.

Acceptance checklist

Definition of lead contact permission gate

1Phase 221 links forward to Phase 222.
2Phase 222 defines contact permission policy without sending contact.
3Permission outcomes cover permit contact draft, require consent refresh, limit channel, hold for quiet hours, escalate risk, and reject contact request.
4Channel rules cover phone, SMS, WhatsApp, email, in-app notification, and FAEDA Team assisted follow-up.
5Consent states, contact matrix, message policy, permission bands, packet fields, timing rules, and review stops are defined.
6Blocked automation prevents real calls, messages, CRM tasks, field tasks, account creation, onboarding, documents, payments, wallets, commissions, marketing lists, exports, and partner sync.
7OS launcher, founder navigation, public scope lock, route cleanup, and main chain control room include Phase 222.
8Mobile render has no horizontal overflow.
9No `/home` backlinks are introduced.

Next phase

Phase 223: Lead Follow-Up Outcome Review Gate

Next we design how future contact outcomes can be reviewed safely without creating sales pressure, fake conversion, or account/onboarding truth.

Open Phase 223
Phase 221 Phase 223