XiteAI Company Policy.

Raise risks, blockers and mistakes early. Report urgent safety, security, privacy, legal, customer or reliability concerns immediately, even if you do not know the cause or the solution. Say what you know, what remains uncertain and who may be affected. A complete report, proof or ranked list of alternatives is never a condition for raising the alarm. Escalate to another responsible leader if an urgent concern is not acknowledged. Develop options together after the issue is visible.

Question assumptions and test unfamiliar approaches, while respecting real limits. Measurements, logs, reproducible failures, provider documentation, hardware capacity and reasonable engineering judgement can establish a constraint. Mathematical or legal proof is not required for everyday engineering decisions, and no word, including impossible, is banned. Agree a time limit for investigation with the responsible lead. Describe the limits of the evidence and revisit conclusions when facts change. Alternatives must remain lawful and within authorised safety, privacy and security boundaries.

The person who reports a problem helps provide context; reporting does not automatically make them the sole recovery owner. The responsible manager must agree a named owner, bring in the right people, provide time and resources, and explicitly reprioritise other work. An owner coordinates progress and asks for help rather than carrying every task alone. A handover needs an accepting owner and a clear record of what remains. Raise an unsafe workload or missing support promptly.

Give an honest account of progress, uncertainty, failures and customer impact. Do not hide a failing project behind a green status, obscure a defect, blame a vendor without evidence or conceal changes made to repair a mistake. Follow the approved change process; urgent containment uses the authorised incident process, with changes recorded promptly. Review incidents to understand decisions and system conditions, improve the process and prevent recurrence. Distinguish honest mistakes from deliberate misconduct.

The CEO and every manager must welcome good-faith reports, questions, disagreement and admissions of mistakes. Thank people for flagging an issue even when their proposed solution is weak or the concern later proves unfounded. No one may be humiliated, retaliated against or penalised for raising a concern in good faith, including a concern about leadership. Recognise early reporting publicly when appropriate without exposing confidential details or identifying a reporter without permission. Share the recovery burden, resolve resource and priority conflicts, and tell the reporter what happens next. Concerns about a manager may go directly to HR, another responsible leader or the published grievance contact.