The rules are public, on purpose.

Every timing rule that governs how a case escalates — how many reports it takes to open a case, how long a provider gets before it goes public, how big the community dispute window is — is a setting our maintainers can tune, not something buried in code. That doesn't mean it's secret: the current rules are visible to anyone who wants to check them.

Every meaningful action the platform takes — a case moving to a new stage, a domain being cleared, a bounty being confirmed — is written to a permanent log for accountability. The public parts of that history show up right on each case's page.