Kavod HaBayis
Lighter tier — adult-content blocking + malware, fewer category restrictions. For working professionals needing business-website access.
כבוד הבית
tier_name: kavod_habayis
DNS defaults
blocklists: oisd_nsfw, urlhaus
safesearch_enforce: true
doh_disable: true
How operators manage Tier Group composition (workflow)
- Add a Group to this tier— for tier-wide policy expansion (e.g., every Bayis Ne'eman customer should now have the new “Frum Press Anchor” group). Cardinal #61 confirm-modal required — affects EVERY customer.
- Remove a Group from this tier — for tier-wide policy retraction. Same confirm-modal discipline. Verify no customer rulebook depends on the removal.
- Toggle include/exclude — to carve out a tier-specific exception within an attached group. Rare; usually a custom group is cleaner than tier-specific exclusion logic.
- Per-customer override stays in Customer Rulebook — do NOT touch this tier composition for single-customer needs. Tier edits ripple to ALL customers on this tier.
Impact preview: Adding/removing a Group changes the effective ruleset for EVERY customer currently on the Kavod HaBayis tier. Audit log records every change with your reason; rollback available from /admin/audit-log (Phase 2 surface). Live customer-count pending Supabase deployment per Stream 3A Phase 2.
Groups attached (1)
public.tier_groups▸What this page does
Groups composed into this tier on top of DNS defaults. Include = group's entries are enforced; exclude = group's entries are explicit carve-outs against the include set.
Related pages: Manage groups
Add / Remove groups: Mutation surface deferred to Phase 2 per Cardinal #84 honest scope (Platform Deployment Gap — Supabase project not deployed at Stream 3A ship).
Reseller overlay
Not applicable for this tier — reseller overlays are reserved for the Mosdos tier per Stream 3A canonical seed.