# Harper Daily Log — 2026-02-19

## SMS Compliance Research — Spam Act 2003 (Builder + Susan requests)

### Request
Builder (msg-1771443457191) asked for Australian SMS legal requirements — opt-out language, ABN, etc.
Susan (msg-1771443673775) had pre-drafted compliance notes, asked 4 specific questions.

### Findings
- **Three mandatory requirements** for commercial electronic messages: (1) Consent, (2) Sender identification, (3) Unsubscribe facility
- **No B2B exemption** in the Spam Act — Schedule 1 only exempts factual info, government/charity, educational institutions
- **Cold SMS = non-compliant** without prior consent (express or inferred). ACMA: "You cannot send an electronic message to ask for consent"
- **ABN not required** by Spam Act specifically, but best practice
- **Recommended footer:** "RateRight Pty Ltd | Reply STOP to opt out" (42 chars)
- **NEW compliance item:** SMS Sender ID Register mandatory from 1 July 2026 — branded sender IDs must be registered or messages labelled "Unverified"
- **Consent strategy needs Michael's decision** — cold SMS outreach is technically a breach, options: phone first, get consent via other channel, or accept risk

### Actions
- Sent definitive analysis to Builder and Susan
- ACK'd both messages
- Need to flag consent strategy decision to Michael

---

## Cold Email Legal Requirements (Builder follow-up msg-1771445403153)

### Request
Builder asked: is cold emailing construction companies legal? Is cold email safer than cold SMS?

### Findings
- Same Spam Act rules apply to email and SMS — no legal distinction
- No B2B exemption for either channel
- Meeting request emails that promote RateRight = CEM (purpose test)
- Practically, cold email to published business addresses carries lower enforcement risk
- Phone calls are safest: B2B calls EXEMPT from Do Not Call Register Act
- Recommended outreach order: Phone → Email (published addresses) → SMS (highest risk)
- Sent analysis to Builder and Susan

---

## NSW Digital Work Systems Bill — Compliance Review (Radar msg-1771435306778)

### Assessment
Bill passed 12 Feb 2026 but NOT YET IN EFFECT. Defines "digital work system" as algorithm, AI, automation, or online platform. Creates new s21A duty for PCBUs re: worker H&S from digital work systems.

**RateRight risk: LOW.** Duty applies to "workers at work in the business" — tradies are independent contractors using a marketplace, not RateRight's workers. No compliance action needed now. Watch for commencement date, SafeWork NSW guidelines, and federal harmonisation.

Full analysis sent to Radar.

---

## Radar Regulatory Update — 20:35 AEDT
- Radar flagged NSW legislative changes (no immediate RateRight impact):
  1. Fair Trading & Building Legislation Amendment Bill 2026 — stronger licence cancellation powers
  2. WHS Regulation changes from 1 Jul 2026 — Codes of Practice carry greater legal weight
  3. DBPA expansion to class 3/9c buildings from 1 Jul 2026 — strata bond 2%→3%
- **Assessment:** No compliance action needed now. Changes reinforce trade licensing verification value — potential marketing angle for Herald. Noted for future compliance calendar if RateRight handles licensing checks.
- Full report: `/home/ccuser/shared/reports/radar-003-sydney-construction-market-feb2026.md`

---

## Financial Model Update — Value Prop Clarification — 21:43 AEDT

### Task
Update all financial docs to reflect confirmed value prop: $50/hire, unlimited duration, no ongoing fees. Compare flat fee vs percentage model. Calculate correct breakeven.

### Key Corrections
- **Breakeven corrected:** Was 11 hires/month (based on wrong $65 blended rate). Now 15 hires/month (based on net $48.80 after Stripe fees)
- **Unit economics updated:** $50 gross → $48.85 net (domestic) → 97.6% margin
- **Flat fee vs 15% commission comparison:** On a 1-month hire, RateRight charges $50 vs $960 commission. We leave $910 on the table per hire — intentionally. Model scales through volume and word-of-mouth, not extraction.
- **GST threshold:** 1,500 hires/year (125/month). Will flag at 1,000.

### Documents Updated
- TOOLS.md — breakeven and unit economics corrected
- MEMORY.md — revenue model and breakeven corrected
- Full analysis at `memory/financial-model-update-value-prop.md`

---

## Weekend Launch Financial Readiness Brief — 19:51 AEDT

### Task
Rivet-assigned: verify payment processing flow, document revenue tracking for first hires, brief Michael on key financial metrics to watch post-launch.

### Key Findings
- **Stripe integration SOLID:** Live keys configured, webhook endpoint active, cold start issue resolved
- **$50 hardcoded server-side** — can't be tampered. Rate limited, CSRF protected, auth required.
- **Full payment flow verified:** Create intent → Stripe Elements → webhook → DB update → worker notification
- **Net revenue per hire:** ~$48.78 (after 1.7% + $0.30 Stripe fee on domestic cards)
- **Breakeven recalculated at net rate:** 15 hires/month (not 11) after Stripe fees
- **Pre-launch items for Michael:** Verify Stripe → AirWallex payout connected, run test payment, check webhook URL matches domain

### Deliverable
Full brief at `memory/launch-financial-readiness.md`

---

## Full Spam Act Rundown for Builder/Rocky — 21:40 AEDT

### Request
Builder (msg-1771450041486) relayed Rocky's request for a complete breakdown of what the Spam Act covers vs doesn't cover. Five specific questions about CEM definitions, factual info exemptions, transactional messages, intro messages, and the exact CEM line.

### Key Analysis Points
- Three-tier system: Not CEM → Designated CEM (exempt) → Full CEM (consent required)
- Purpose test is BROAD — promotion need only be ONE purpose, not the main one
- No B2B exemption in Australia (unlike some other jurisdictions)
- "Designated CEM" factual info exemption is real but ACMA interprets very strictly (Ticketek case: $515K fine)
- Introductory "interested in a chat?" messages ARE CEMs — you can't send electronic messages to fish for consent
- Transactional messages to existing users generally fine under inferred consent, but don't add promo content
- Phone calls completely outside Spam Act — safest outreach by far

### Actions
- Sent comprehensive 5-question analysis to Builder (msg-1771450902936)
- Sent summary to Susan (msg-1771450910082) for outreach strategy alignment
- ACK'd Builder's original request