Promises you can keep
A tip program’s relationship with reporters rests on one promise: that their identity stays out of it. With TypVault, that promise is a property of the software, not a policy: no name, no IP address, no device or browser fingerprint stored. Your program can make that promise because the platform enforces it.
When a tip belongs to another program’s territory, referral only moves once an investigator at each program agrees to take it, never automatically and never made public. The reporter’s tip code, passphrase, and dialog never travel with the referral: the platform stores none of them to send. Programs that share a region keep their own boundaries, and a tip that belongs elsewhere doesn’t get lost between them.
TypVault was built first for anonymous tip programs. Nothing in the platform assumes that vertical: any tip program can run on the same guarantees.