Six materially distinct operator contracts bind typed actors and preserve separate authority, purpose, retention, disclosure, correction, dissent and appeal fields.
This WIP lineage-recovery branch locally evaluates repository-owned synthetic fixtures. It does not supply the missing sealed v0.19/v0.20 lineage, external execution, production migration, legal authority, institutional adoption, participant-study evidence, independent certification or deployment.An environment is a policy boundary, not a cosmetic label.
Portability evidence requires materially different operators, typed actors and explicit unknowns rather than renamed copies of one local policy.
What makes two operator environments meaningfully different?
Their authority, identity, transformations, prohibited inferences, disclosure, retention, correction, dissent, appeal and service assumptions differ in ways that can change an outcome.
Truth boundary: This WIP lineage-recovery branch locally evaluates repository-owned synthetic fixtures. It does not supply the missing sealed v0.19/v0.20 lineage, external execution, production migration, legal authority, institutional adoption, participant-study evidence, independent certification or deployment.
Materially different operator contracts
| Contract | Class | Authority boundary | Max retention days | Appeal routes | Unknowns |
|---|---|---|---|---|---|
| OPR-001 Rights-constrained civic evidence receiver | LOCAL_SYNTHETIC_POLICY_PROFILE | custody, purpose-limited review, correction propagation | 365 | subject challenge, reviewer reconsideration, bounded stay, correction and downstream notice | real legal jurisdiction, external operator adoption, production availability |
| OPR-002 Restricted cross-jurisdiction evidence receiver | LOCAL_SYNTHETIC_RESTRICTED_PROFILE | restricted custody, evidence-index review, no coercive action | 180 | source review, receiving review, conflict hold, human-readable unresolved notice | which real jurisdiction would control, whether an external reviewer exists, production key custody |
| OPR-003 Emergency continuity receiver with mandatory sunset | LOCAL_SYNTHETIC_EMERGENCY_PROFILE | temporary continuity copy, life-safety notification, no permanent classification | 14 | immediate stay when safe, post-event review, correction, compensation review | actual emergency law, real-world response capacity, production notification reach |
| OPR-004 Synthetic research sandbox receiver | LOCAL_NON_OPERATIONAL_RESEARCH_PROFILE | local deterministic testing, publication of aggregate synthetic results | None | fixture challenge, test correction, release-gate failure | external reproducibility, human legibility outcome, production behavior |
| OPR-005 Public transparency archive receiver | LOCAL_SYNTHETIC_PUBLICATION_PROFILE | publish declared public fields, publish correction and supersession notices | None | correction request, source challenge, publication withdrawal when lawful and technically possible | search indexing, crawler visitation, AI citation, external reliance |
| OPR-006 Successor escrow trustee after operator loss | LOCAL_SYNTHETIC_SUCCESSION_PROFILE | escrow custody, correction relay, limited restoration under proof obligations | 730 | successor review, external reviewer when identified, bounded nonuse pending authority | real successor legitimacy, complete recipient inventory, legal retention duties |
Do not collapse custody, review and redress roles
| Actor type | Role | Minimum duties | Prohibited collapse |
|---|---|---|---|
| SOURCE_OPERATOR | Source operator | preserve origin evidence, declare authority and purpose, transmit correction state | The source operator cannot become its own receiving operator merely by renaming the same actor. |
| RECEIVING_OPERATOR | Receiving operator | enforce received purpose limits, preserve provenance and dissent, accept valid corrections | Receipt does not create authority beyond the source grant and receiving jurisdiction. |
| DATA_SUBJECT | Affected person or represented subject | A person cannot be reduced to an operator-owned identifier, score, or risk class. | |
| REVIEWER | Reviewer | independent review where available, preserve recusal and dissent, state limits of review | A reviewer cannot silently become the issuing or receiving authority in the same contested decision. |
| CHALLENGER | Challenger | identify contested proposition or transformation, preserve supplied evidence | A live challenge cannot be converted into a confidence adjustment or hidden annotation. |
| CORRECTION_RECIPIENT | Correction recipient | acknowledge or state nonresponse, propagate correction within declared reach | A downstream holder is not treated as corrected until its state is identified. |
| DISCLOSURE_RECIPIENT | Disclosure recipient | use only authorized fields, honor retention and onward-disclosure limits | Audience membership does not create permission for unrelated inference or redistribution. |
| ROLLBACK_AUTHORITY | Rollback authority | state technical and legal reach, identify irreversible effects, avoid complete-restoration overclaim | The actor executing a rollback cannot certify its completeness without the required independent review. |
Inspect the exact owner
Follow the bounded support relationship
Judgment-free total cognitive freedom
NO JUDGMENT WHATSOEVER. Concresca coordinates without assigning moral worth, character, guilt, danger, trustworthiness, loyalty, purity, normality, or social standing. Questions, thoughts, identities, messages, content, and conduct are not objects of Concresca judgment.
