# Business rules — public-procon8.com Evidence date: 2026-10-06. Source revision: `e5cc6be` on `master`. Rules below are taken from page copy or from code that enforces a check. Each rule is marked **Documented** (stated on a page or in a comment) or **Inferred** (the code behaves this way and no separate rule document says so). Nothing here is a new product decision. There is no rules engine, database constraint, or policy file. ## Identity and positioning ### BR-001 — Service offer **Documented.** The site offers project controls and contract management to engineering, construction, and manufacturing. Home hero and title (`index.php`). About adds civil, building, infrastructure, and defence, with particular focus on rail and aviation (`about.php`). ### BR-002 — Legal names in use on the site **Documented**, and they disagree. | Name | Where | |---|---| | PROCON8 MANAGEMENT LIMITED | Home trust paragraph (`index.php`); `SLA.php` title and meta description; contract intro ("Procon8 Management Limited") | | PROCON8 Management Ltd | Guernsey office (`address.php`) | | PROCON8 Operations Ltd | Mauritius office | | PROCON8 Consulting SA Pty Ltd | South Africa office | | PROCON8 Middle East | Dubai office. No "Ltd" or "Pty" in the heading | | PROCON8 India | Commented out of `address.php`. Visible in `address.php.1` | | PROCON8 Australia Pty Ltd | Commented out of `address.php`. Visible in `address.php.1` | | Procon8 | Footer copyright, menu logo alt text | Which name is the contracting party is **Unknown / Requires Confirmation**. ### BR-003 — How the company says it works **Documented** on `about.php` and `index.php`. - Once deployed, the team defines Project Control and Contract Management requirements, establishes the implementation plan, and drives setup to completion. - The stated method is DMAIC: Define, Measure, Analyse, Implement, Control. - Contribution is described as most useful early in a project. - Systems should be embedded in day-to-day project activity. - The home page says the company will report contentious issues when that is in the best interest of the project, and that employees act as mentors and coaches. These are marketing statements. The site does not implement a DMAIC workflow. ### BR-004 — Contract baseline and recoverable deviations **Documented** on `contract.php`. Procon8 Management Limited identifies contract baseline deliverables, highlights deviations with a Contract Management System, classifies them as recoverable or non-recoverable from the contract, helps recover deviations that should be for the customer's account, and looks for ways to reduce exposure on non-recoverable deviations. The CMS is not software in this repository. ### BR-005 — Project control reports to the Project Director **Documented** on `project.php`. Project control is described as independent, reporting directly to the Project Director, and as a check on information coming from other functions in a matrix organisation. ### BR-006 — Quantivia is a separate product **Documented** on `software.php`. Quantivia is described as software the visitor uses elsewhere. Enquire, tour, and demo actions leave this site. **Inferred:** this repository is not the Quantivia product. ### BR-007 — Scale claims **Documented** as fixed copy, not as a calculated count. - 25+ global projects, 15 countries, 6 continents (`index.php`, `projects.php`). - "some of the largest global projects over the past 25 years" (`projects.php`). The project lists are longer than six featured tiles. The numbers are not derived from the list at runtime. ## Contact and offices ### BR-008 — One public mailbox **Documented.** Every visible office mailto, the utility bar, and the footer use `info@procon8.com`. The mailer To address is the same (`mail/mail.php`). **Inferred** from code: the form does not route by office. Every submission goes to that one address, with recipient display name `Quantivia`. A commented line would have sent to `heinrich@overdrive.co.za` instead. That line is not active. ### BR-009 — Named local contacts **Documented** in `address.php` for the four visible offices: Stacey Gee (Guernsey), Ansee Seebaluck (Mauritius), Alastair Davidson (South Africa), Kiran Sable (Dubai). India (Rakesh Sable) and Australia (Ray Walters) are commented out of the included file. Whether these people are still the contacts is **Unknown / Requires Confirmation**. ### BR-010 — Published phone numbers are not one set **Documented.** The footer prints Europe, USA, and Africa numbers. `address.php` prints a different Guernsey number (`+44 1481 749276`) and does not print a USA number. The Africa footer number `+27 (0)79 498-9114` matches the South Africa office number `+27 794989114` as digits. The Europe footer number does not match the Guernsey office number. ### BR-011 — Email is not a contract **Documented** in `disclaimer.html`, which no PHP page includes. - Confidentiality notice. Misdirected mail should be reported to `postmaster@procon8.com`. - PROCON8 accepts no liability for viruses or for loss from use of the email. - No employee or agent may conclude a binding agreement by email without express written confirmation by Alastair Davisdon. The surname spelling differs from Alastair Davidson on `address.php`. - Views in email are the author's, not necessarily PROCON8's. Defamatory or infringing email is outside employment, and the employee is personally liable. - Company web address printed as `http://www.procon8.com`. **Inferred:** because the brochure never includes this file, a visitor of the current pages does not see these terms. They read as an email footer that was stored in the tree. ## Enquiry handling ### BR-012 — What the visitor must enter **Inferred** from `send.php` and `validateFields` in `js/scripts.js`. - Name, email, and message are required on the client. - Email must match `/(.+)@(.+){2,}\.(.+){2,}/`. - The server does not repeat these checks. Any POST that reaches `mail/mail.php` is turned into an email body. ### BR-013 — Where the enquiry goes **Inferred** from `mail/lib/mail_sender.php`. - Subject is always `Procon8 Management Website Request`. - From address is `info@procon8.com` when both name and email were posted. The visitor's name is the display name, not the envelope address. - Reply-To is the visitor name and email. - The body includes every posted field, plus the page URL the script adds as `url`. - Success shown to the visitor is "Thanks for your submission, we will be in touch shortly." That sentence does not name a response time. `address.php` says a representative will contact the visitor. No SLA time is stated. ### BR-014 — Referrer capture **Inferred.** If the page URL contains `ref`, the form adds that value as `referrer` and it is included in the email body. No other campaign rule is coded. ### BR-015 — No stored enquiry record **Inferred.** Nothing in the application PHP writes the enquiry to a database or to a file. The only persistence on the success path is the outbound email. The unused GoDaddy CGI would write a file if it were called. It is not called by these pages. ## Access ### BR-016 — The brochure is public **Inferred.** No session, login, role, or password check exists in the page PHP. ### BR-017 — Stats directory expects a password **Inferred** from `stats/.htaccess`. Apache basic auth, realm "procon8.com Statistics", user file `.statspwd` at a GoDaddy chroot path. The password file is in the repository. This document does not copy it. Who should have access is **Unknown**. ### BR-018 — Social channels were turned off on the current shell **Documented** by the comment "20180124 - Disable social media links (p8.co.za & p8.com) - pj" and by `display: none` on the LinkedIn and Twitter blocks in `header.php` and `footer.php`. `SLA.php` still shows a Twitter icon and a LinkedIn widget. That page is unlinked. ## Copy rules that are not enforced by code ### BR-019 — Client logos do not navigate **Inferred.** Every logo anchor in `brands.php` is `href="#"`. The page does not claim a link to the client's site. ### BR-020 — Home project tiles do not open a case study **Inferred.** The six tiles in `index.php` have no anchor. The only path to the write-ups is the "VIEW ALL OUR WORK" button to `projects.php`. ## Conflicts that need a person - BR-002: several legal names, no statement of which one contracts. - BR-010: two different Europe / Guernsey numbers. - BR-011: "Alastair Davisdon" in the disclaimer versus "Alastair Davidson" on the contact block. - BR-008 display name "Quantivia" on a Procon8 enquiry email. The code does this. No page says the recipient name should be Quantivia. - India and Australia offices: hidden in the included address file, visible in `address.php.1`. No comment says which file is authoritative.