Public Config

Public launch-posture surface — what the signup page + member shell need to render honestly BEFORE anyone types anything: is signup open, does it need an invite code, plus (admin-30 wave 3) the active feature FLAGS for this caller and any broadcast BANNER. NO auth by design (an anonymous visitor is exactly who needs this); switch reads ride db.get_setting's ~15s TTL cache. Flags are evaluated with the SESSION user_id when a cookie is present (so per-user overrides + percent buckets are stable per member), else user_id=None. Best-effort: flags/banner degrade to {}/absent, never a 500.