# Phorm

Phorm is the canonical AI-first design, layout generation, prompt-to-interface, brand kit, component composition, design review, export, screenshot-backed iteration, and human-machine product design layer for PlatPhormNews.

Base URL: https://phorm.platphormnews.com
Design-facing URL: https://design.platphormnews.com
Version: 0.1.0

Canonical policy: phorm.platphormnews.com is the platform/service identity. design.platphormnews.com is the polished design-facing product domain and should canonicalize to phorm.platphormnews.com unless a route explicitly documents a different policy.

Public read-only surfaces include the homepage, designer shell, browser-local design drafts, template library, gallery/examples, responsive preview, deterministic design review preview, AgentUI handoff preview, discovery files, health summaries, OpenAPI, RSS/Atom, sitemap, public FAQ/docs, CLI examples, and read-only MCP introspection.

Protected actions require PLATPHORM_API_KEY via Authorization: Bearer or X-PlatPhorm-API-Key. Protected actions include server-side design persistence, generation runs, exports, screenshots, BrowserOps/Evals reviews, report publishing, network sync, and MCP tool calls.

Current template count: 26
Current template categories: dashboard, tool, docs, report, form, api, agentui, browserops, evals, sandbox, trace, content, data, workflow, mobile

Persistence: Canonical database persistence is not wired in this Phase 1 slice. Protected server writes use process memory and public UI drafts use browser storage with explicit local-only state.

Prompt-to-interface: deterministic template generation is active. Model-assisted generation is server-only scaffolding and is degraded unless a provider is configured. Phorm does not claim BrowserOps, Evals, Sandbox, AgentUI, Docs, Catalog, SVG, ASCII, or Layout success unless an artifact or downstream response exists.

Trace and JA4 policy: Phorm accepts traceparent/tracestate and X-PlatPhorm trace headers. x-vercel-ja4-digest may be captured as fingerprint-adjacent metadata for protected observability, but public artifacts expose only redacted or hashed state and never raw values.