{
  "format": "vercy-enterprise-profile-candidate/v1",
  "contourId": "EM-LEG-06",
  "name": "Enterprise Data Subject Request, Retention and Disclosure Binding",
  "decision": "PROFILE",
  "newRuntimeId": false,
  "bases": [
    "WM-XCT-002",
    "WM-XCT-003",
    "WM-DAT-001",
    "WM-DAT-004",
    "WM-PER-001",
    "WM-POL-001",
    "WM-KNW-012",
    "WM-ACT-021",
    "WM-XCT-029",
    "WM-REC-001"
  ],
  "constraints": [
    "WM-ACT-021 owns DSR intake, requester or representative, verification, case state, evidence, communications, determination, appeal and closure.",
    "Each request resolves explicit dataset-system target tuples and records one determination, execution result, evidence reference, propagation state, refusal ground and appealability result per tuple.",
    "Case closure neither implies all locations erased nor retires the ProcessingActivity.",
    "Pause and extension behavior is supplied by a jurisdiction profile; the base profile defaults to no pause.",
    "Consent withdrawal affects only basis assertions citing the withdrawn WM-XCT-002 instrument and is prospective.",
    "Statutory retention floor and legal hold are separate constraints; unresolved precedence refuses disposition execution.",
    "Suppress-and-retain binds the surviving subset to a separately governed restricted-purpose ProcessingActivity with its own accepted basis and expiry.",
    "WM-KNW-012 owns policy and WM-XCT-029 owns instantiated duty or assignment.",
    "WM-XCT-003 may narrow disclosure shape but cannot widen purpose or add a basis.",
    "Tombstones are durable WM-DAT-001 or WM-REC-001 records referenced by the case and outlive case retention.",
    "Deletion proof contains target tuple, method, authority, event time and digest but no payload.",
    "The digest covers the disposition record; subject-derived input requires a keyed digest with the key outside the proof.",
    "Derived targets inherit a purpose ceiling and receive propagation obligations after source erasure or hold.",
    "Aggregate projections prohibit microdata and require cohort-floor and cross-release-linkability re-evaluation after membership change."
  ],
  "holds": [
    "Registry allocation is pending and no identifier may be guessed.",
    "Cross-model legal-hold precedence remains unresolved and blocks executable conflict resolution.",
    "Purpose-taxonomy and ROPA-edition mastership remain unowned.",
    "Cohort-control and derivation-lineage mastership remain unowned.",
    "Processing-operation vocabulary, technical-measure ownership and jurisdiction profiles remain incomplete.",
    "WM-XCT-002, WM-XCT-003 and WM-ACT-021 are non-canonical drafts with relation and source-pin gaps.",
    "WM-PER-001 subject-rights execution overlap requires demotion to a person-to-case reference."
  ]
}