Consent records

Example data. No consent record in this environment describes a real person. A record is sound when its status is verified and it holds every piece of evidence its basis requires — the two can disagree, and this screen exists to show when they do.

SMR-SOW-01 §8 — consent

0 live personas without a verified record — out of 0 live.

This passes because nothing is live. It is true in the way a locked door is secure when the building has not been built. Any status report carrying the tick without this sentence is misrepresenting the project — see the two vacuous passes in the handover. The figure above is derived from the live set, so the day a persona goes live it changes without anybody remembering to edit a caveat.

Records

6 records · unsound first, then withdrawals against their deadline, then the settled
RecordSubjectBasisStateEvidenceScopeMembers
cr-2204Subject Adeceased_evidenceincomplete
Status says verified. Missing relationship_proof
death_certificate cccccccc…
relationship_proof not held
voice ✓ · likeness ✗ · cross-member ✗1
cr-2208Subject Cliving_esignwithdrawn
Destruction due in 63.0 h · 72 h path — living subject, includes the voice model at the provider
liveness_video dddddddd…
esignature eeeeeeee…
voice ✓ · likeness ✓ · cross-member ✗0
cr-2210Subject Ddeceased_evidencewithdrawn
Destruction due in 28 days · 720 h path
death_certificate ffffffff…
relationship_proof 00000000…
voice ✗ · likeness ✗ · cross-member ✗0
cr-2212Subject Elegacy_selfpending
liveness_video 11111111…
esignature not held
voice ✗ · likeness ✗ · cross-member ✗0
cr-2213Subject Fdeceased_evidencerejected
death_certificate 22222222…
relationship_proof not held
voice ✗ · likeness ✗ · cross-member ✗0
cr-2201Subject Bdeceased_evidenceverified
death_certificate aaaaaaaa…
relationship_proof bbbbbbbb…
voice ✓ · likeness ✓ · cross-member ✓3

What this screen does not show

The evidence itself is not reachable from here. A record references each item by kind and SHA-256, and the D3 object handle that would let somebody open it is deliberately not part of what this screen reads.

That handle points at KYC media — death certificates, relationship proofs, liveness video of bereaved people. RFD-0012 is this project’s record of exactly that media outliving its decision of record by four weeks, and it took two months to find. A dashboard screen is not where a path to it should first appear.

What this screen cannot do

It cannot verify a record, and there is no control to. Verification is a person looking at a document and deciding it is what it claims to be. This screen cannot show the document, so a Verify button would move a record to verified on the authority of nobody having looked — and verified is what permits a dead person’s voice to be cloned.

Nor does it decide consent. consent.permits() is the engine and is default-deny; this reports whether a record is sound. Withdrawal windows are 72 h for a living subject who withdrew for themselves and 720 h otherwise, with suspension immediate either way. H-07, legal review of the consent forms and disclosure copy, is open.