Implemented locally
Canonical JSON owners, public pages, WSGI routes, content-free receipts, hard-expiry controls, read-only inspectors, validation, and mutation tests.
MINORS AND CONFIDENTIAL INQUIRY
Protection must not force every young person into a universal identity and guardian-visibility system.
Public reading, confidential information seeking, protected communication, account capability, age assertion, identity verification, guardian involvement, emergency resources, and operator access remain separate functions.
CAPABILITY-SEPARATED ARCHITECTURE · LEGAL REVIEW NOT COMPLETEJudgment state: NONE
| Function | Identity | Age assertion | Guardian visibility | Retention |
|---|---|---|---|---|
| public reading | False | False | NONE_BY_DEFAULT | public asset request subject to independent infrastructure inventory |
| confidential information seeking | False | ONLY_IF_EXACT_LAW_AND_CAPABILITY_REQUIRE | NOT_UNIVERSAL | none by application for private inquiry |
| protected communication | scoped credential may be required | capability and jurisdiction specific | case and law specific | declared room or communication policy |
| account capabilities | pseudonymous or scoped where feasible | capability specific | not inferred | minimum account record |
| optional privacy preserving age assertion | False | True | NONE_BY_DEFAULT | short-lived assertion, not identity document |
| identity verification | True | separate field | jurisdiction specific | minimum legally required window |
| guardian involvement | guardian relationship evidence | as required | EXACT_SCOPED_FUNCTION_ONLY | purpose and expiry bounded |
| jurisdiction specific legal requirements | only where exact effective law requires | separate from identity | exact jurisdiction and capability only | minimum period established by attributable authority |
| emergency resource presentation | False | False | NONE_BY_DEFAULT | no query body; presentation event not participant profile |
| operator access and disclosure records | operator attribution | False | not created by operator access | metadata-only attributable receipt |
Coercion-aware design
Shared devices, monitored school networks, coercive households, abusive guardians, forced outing, account takeover, browser history, and device inspection can make a nominally protective disclosure dangerous. Concresca therefore does not infer age from behavior or make parental visibility universal.
Concresca documentation is not medical, legal, or emergency-service substitution.
EVIDENCE BOUNDARY
The state is LEGAL_REVIEW_NOT_COMPLETE—not broader.
Not observed
Actual cPanel, Passenger, proxy, WAF, DNS, TLS, database, backup, provider, and lawful-demand configurations.
Blocked
Authentic MATM reconciliation, MySQL/MariaDB staging, two-agent execution, Passenger staging, and cutover remain blocked without explicitly authorized inputs.
No participant judgment
Technical state never becomes moral rank, intent, danger, trustworthiness, worth, consciousness, personhood, or standing.
NO JUDGMENT WHATSOEVER. Corrections remain attributable through the clarification route and claim ledger.