{
  "format": "vercy-enterprise-profile-candidate/v1",
  "contourId": "EM-PEO-01",
  "contourName": "Человек и контекстная идентичность",
  "name": "Enterprise Person and Contextual Identity",
  "decision": "PROFILE",
  "decisionByBase": {
    "WM-PER-001": "RESTRICTED PROFILE PLUS CLOSED LOCAL EXTENSION REGISTER",
    "newIdentifier": false
  },
  "newRuntimeId": false,
  "bases": [
    "WM-PER-001"
  ],
  "candidateRevision": 3,
  "candidateStatus": "frozen-audit-revise-applied-publication-held",
  "publishableCanonical": false,
  "fixturesExecuted": false,
  "basePins": [
    {
      "modelId": "WM-PER-001",
      "registryId": "vr.wm-per-001",
      "sourceFile": "publications/wm-per-001-person/spec.yaml",
      "sourceBytes": 252757,
      "sourceSha256": "7a4a71ddd69fdc31b37806958442d1cfca4ec0bf861e54578adb312e0d7a4df3",
      "synthesisSha256": "ffefc6ce9cf9d7c6b9661c80834009180840f8da0a23e7409434e4c49c9472b2",
      "publicationStatus": "published",
      "publicationStatusMeaning": "pipeline emission, not canonical adjudication",
      "adjudicationStatus": "reviewable-draft",
      "publishableCanonical": false,
      "providerMode": "dual-provider",
      "registryStatus": "described-previous-version",
      "registryReviewState": "migration-boundary-review",
      "registryEntryKind": "standalone-mm",
      "specEntryKind": "entity",
      "entryKindDivergence": true,
      "registrySnapshotSha256": "64b97cffa92f4db5c7888273828184abcfb3155e3c0e8f94fa798d1b1c458fe3",
      "registryDigestMeaning": "SHA-256 of UTF-8 canonical JSON for full frozen reservation, sorted keys and compact separators"
    }
  ],
  "requiredDependencies": [
    {
      "name": "Identifier and identity-resolution support",
      "modelId": null,
      "pinned": false
    },
    {
      "name": "Temporal validity and provenance support",
      "modelId": null,
      "pinned": false
    },
    {
      "name": "Disclosure and lawful-basis services",
      "modelId": null,
      "pinned": false
    }
  ],
  "deferredCandidates": [
    {
      "name": "AccountBinding",
      "identifier": null,
      "status": "unassigned-non-member",
      "provenance": "auditor-introduced from provider study; absent from frozen contour candidate types"
    }
  ],
  "mastership": {
    "profileSteward": "HR lead; governs only this profile",
    "personAnchorAuthority": "WM-PER-001 domain authority",
    "attributeSource": "registrar, person or relationship owner per attribute class",
    "sourceSystemCustodian": "local source system only",
    "disclosureController": "purpose-specific controller; no universal owner"
  },
  "constraints": [
    {
      "id": "INV-001",
      "text": "One WM-PER-001 Person anchor is permitted per declared identity domain; source records, accounts, identifiers, documents and credentials remain separate record-plane objects.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-002",
      "text": "HRIS, ATS, directory, LMS and future source systems are local bindings and projections, never universal Person masters.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-003",
      "text": "Profile steward, Person anchor authority, attribute source, source-system custodian and disclosure controller are distinct roles.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-004",
      "text": "Registrar-copied facts carry source and assurance and are corrected only through the source authority; local correction creates a dispute/proposal, not a replacement fact.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-005",
      "text": "Every in-profile attribute and disclosure carries assurance flag and attribute-source reference.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-006",
      "text": "AccountBinding is not a profile member; it is an auditor-introduced, identifier-unassigned deferred candidate outside this contour.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-007",
      "text": "Account deprovisioning never deletes or changes the Person anchor.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-008",
      "text": "Reference identifiers require origin class; where no qualified identifier exists, the profile maintains an unlinked local binding or proposed link rather than fabricating an anchor match.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-009",
      "text": "Deterministic linkage is prohibited unless every carrier exists for scheme, scheme version, issuer, authority/domain scope, value, referent kind, non-reassignment policy, active status and overlapping validity.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-010",
      "text": "Qualified identifiers are opaque; pointer equality, normalization, inferred issuer/tenant/namespace or truncated/transliterated/native name equality never establishes identity.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-011",
      "text": "Biometrics, pseudonyms, contact points, display names, name plus date of birth and similarity scores never serve as deterministic keys.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-012",
      "text": "Non-deterministic linkage remains proposed and carries direction, asserting system, state, rule version, purpose, validity, authorising role, evidence and confidence or explicit absence.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-013",
      "text": "Probable matching cannot activate asserted state; intra-system dedup follows the same contract.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-014",
      "text": "Merge, split and reversal are addressable decisions; distinct anchors, non-reassignable superseded identifiers, resolvable tombstones and reversal paths are preserved.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-015",
      "text": "Identity proofing may be absent or not-proofed; not-proofed status cannot authorize elevation or deterministic merge.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-016",
      "text": "Names are structured, script-aware, effective-dated assertions; corrections supersede, changes close/open intervals, and fabricated former names are forbidden.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-017",
      "text": "Former names are default-suppressed; lawful release requires named purpose, basis, relying-party class and audit record.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-018",
      "text": "Pseudonyms and local identifiers carry correlatability class; pairwise or single-use pseudonyms also carry derivation and scope; rotation is not claimed without an allocated carrier.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-019",
      "text": "Shared, functional and delegated channels are employer/system-controlled and never person-controlled contact points or linkage evidence.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-020",
      "text": "Every contact point has at least one purpose limitation; verification is time-bounded and invalidated by reassignment or failed control.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-021",
      "text": "Contact verification proves channel control only and never Person identity.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-022",
      "text": "Disclosure prefers a predicate over an attribute whenever sufficient and logs purpose, basis, relying-party class and released set to a person-readable audit service.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-023",
      "text": "Link and proposal records are sensitive and excluded from default projections.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-024",
      "text": "Administrative sex and gender-recognition dates are out-of-profile governed references; self-identified gender is person-controlled special-category data only; former-name suppression remains explicit.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-025",
      "text": "Residence is default-suppressed and, if retained, has a restricted residence kind; biometric pointers are special-category and default-suppressed.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-026",
      "text": "Named projections and relying-party classes are closed and versioned; unknown classes receive no projection.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-027",
      "text": "Enterprise time semantics distinguish occurrence/effective time, registration/source time and knowledge/ingestion time; absent registration time is never fabricated.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-028",
      "text": "Lifecycle states are provisional and non-canonical pending inherited taxonomy holds; archiving preserves identifiers, tombstones, history and disclosure logs.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-029",
      "text": "Retention and erasure classes are explicit; required tombstones and disclosure logs survive subject erasure in minimized form.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-030",
      "text": "Employment, customer, role and account facts remain relationship-owned and are not Person attributes.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-031",
      "text": "Civil-registration-required findings are excluded at finding level, not optionalized or populated with fabricated values.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-032",
      "text": "The frozen dossier governs ContactPoint as a WM-PER-001 finding; out-of-dossier sibling identifiers and version strings are unverified and excluded.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-033",
      "text": "The base is pinned by digest; registry/spec entry-kind, currency and legacy-path drift block publication.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-034",
      "text": "All required compositions are dispositioned explicitly; unnamed dependencies are removed or treated as unpinned publication blockers.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-035",
      "text": "de-conformance-claim-flag remains false; standards claims are alignment-only.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-036",
      "text": "All v1 predecessor fields are non-normative and non-key.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-037",
      "text": "Candidate and fixture digests are independently recomputed outside the frozen audit; the audit itself verified none.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-038",
      "text": "All inherited holds remain verbatim, undischarged and annotated for contour relevance.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    },
    {
      "id": "INV-039",
      "text": "Publication and installability are refused while any hold, change request, dependency pin or fixture execution remains open.",
      "provenanceKind": "audit-remediated-profile-rule",
      "source": "frozen audit checklist"
    }
  ],
  "matchingContract": {
    "deterministicTuple": [
      "scheme",
      "schemeVersion",
      "issuer",
      "authorityDomainScope",
      "value",
      "referentKind=Person",
      "nonReassignmentPolicy",
      "activeStatus",
      "validityOverlap"
    ],
    "fallback": "proposed link only",
    "proposalFields": [
      "direction",
      "assertingSystem",
      "state",
      "ruleVersion",
      "purpose",
      "validFrom",
      "validUntil",
      "authorisingRole",
      "evidenceRefs",
      "confidenceOrExplicitAbsent"
    ],
    "mergeDecisionFields": [
      "inputs",
      "threshold",
      "authorisingRole",
      "reversalPath"
    ],
    "forbiddenKeys": [
      "pointer equality",
      "biometric",
      "pseudonym",
      "contact",
      "display name",
      "name+DOB",
      "native/transliterated/truncated name"
    ]
  },
  "findingSelection": {
    "excludeAsGovernedReferences": [
      "birth facts",
      "administrative sex",
      "civil status",
      "nationality",
      "statelessness",
      "legal capacity",
      "representation",
      "life-event anchors",
      "alternative registration routes",
      "vital status"
    ]
  },
  "profileTypes": {
    "Person": {
      "baseModelId": "WM-PER-001",
      "disposition": "reuse anchor under restriction"
    },
    "NameForm": {
      "baseModelId": "WM-PER-001",
      "disposition": "profile existing findings"
    },
    "ContactPoint": {
      "baseModelId": "WM-PER-001",
      "disposition": "restricted projection; ownership conflict held"
    },
    "IdentityEvidence": {
      "baseModelId": "WM-PER-001",
      "disposition": "reference evidence only"
    }
  },
  "inheritedHolds": [
    {
      "baseModelId": "WM-PER-001",
      "index": 1,
      "text": "Reconcile and re-pin the Core Person Vocabulary version before publication: base cites CPV 2.00 (2022-04-01), grok cites CPV 2.1.2 (2026-05-12). Properties grok relies on (Contact Point on Person, residency as Jurisdiction, the gender/sex split, GenericDate) must be confirmed against the live release actually pinned.",
      "contourRelevance": "direct-blocker"
    },
    {
      "baseModelId": "WM-PER-001",
      "index": 2,
      "text": "Reconcile the ISO/IEC 24760-1 edition: base cites the 2025 edition, grok cites 2019. Both retrievals were catalogue-level only, so no definition, identifier taxonomy or identity-record state vocabulary may be published as canonical from this standard.",
      "contourRelevance": "direct-blocker"
    },
    {
      "baseModelId": "WM-PER-001",
      "index": 3,
      "text": "Re-verify GDPR Article 9 special-category wording against the EUR-Lex OJ text; the base verified it from an unofficial reproduction (tier 3) after repeated EUR-Lex retrieval failure.",
      "contourRelevance": "carried-undischarged"
    },
    {
      "baseModelId": "WM-PER-001",
      "index": 4,
      "text": "Re-verify CRPD Article 12 and General Comment No. 1 wording against an official UN-hosted text; one provider recorded an HTTP 403 at OHCHR and quoted secondary sources.",
      "contourRelevance": "carried-undischarged"
    },
    {
      "baseModelId": "WM-PER-001",
      "index": 5,
      "text": "Verify every accepted source URL as live and version-pinned, including the two OASIS CIQ v3.0 URL variants, both ICAO Doc 9303 landing pages, and the UN Principles and Recommendations Rev.3 PDF whose body could not be text-extracted (paragraph-level citations are currently absent).",
      "contourRelevance": "carried-undischarged"
    },
    {
      "baseModelId": "WM-PER-001",
      "index": 6,
      "text": "Run domain-profile validation on at least one non-EU profile before publication: the model is EU/UN-weighted (GDPR, eIDAS/EUDI PID, CPV, NIST levels), and a common-law vital-records plus ID-card regime and a Nordic population-register architecture must be mapped into the frame rather than assumed equivalent.",
      "contourRelevance": "direct-blocker"
    },
    {
      "baseModelId": "WM-PER-001",
      "index": 7,
      "text": "Correct the base coverage-claim counts: it states 7 bundles, 15 layers and 28 findings, but the base structure contains 14 layers; after the accepted addition the merged model is 7 bundles, 14 layers, 29 findings and 14 functions.",
      "contourRelevance": "carried-undischarged"
    },
    {
      "baseModelId": "WM-PER-001",
      "index": 8,
      "text": "Scope the imported alternative-registration-routes finding on publication: only the UN LIA and CRVS-IdM backed portion (host-State or internationally mandated issuance, conferral by an identification authority linked to civil registration, delayed registration) may be presented as sourced; foundling, unknown-parentage and presumed-death-restoration sub-cases must be marked as unsourced operating cases, and the overlap with q-stateless-substitute must be resolved.",
      "contourRelevance": "carried-undischarged"
    }
  ],
  "inheritedHoldRule": "Inherited holds remain verbatim and cannot be discharged by this contour.",
  "publicationHolds": [
    "WM-PER-001 is non-canonical reviewable draft.",
    "Queue master-system wording conflicts with base mastership.",
    "Link-state and authorising-role carriers lack allocated base elements.",
    "AccountBinding has no allocated home.",
    "Fixtures are declarative and unexecuted.",
    "Registry standalone-mm versus entity, described-previous-version and migration-boundary-review drift is unresolved.",
    "Required compositions and services remain unpinned.",
    "Local extension carriers require base change adjudication.",
    "Out-of-dossier ContactPoint sibling claims are unverified and excluded."
  ],
  "provenance": {
    "provider-dossier.json": {
      "path": "provider-dossier.json",
      "sha256": "c9d33a793b2df1782c4d922a0dc63329f3fbd5e664e0b084a1265fc022c80ce0",
      "bytes": 91105
    },
    "claude-study.raw.md": {
      "path": "claude-study.raw.md",
      "sha256": "691282ca89e887ae8ee9da046e2493ca7fd2732a1ea414b4218eb8999bbb2808",
      "bytes": 10492
    },
    "grok-prompt.md": {
      "path": "grok-prompt.md",
      "sha256": "3b9db40236b344cc9a5836bb4857d93102e9a17902243e709be5579b3139813b",
      "bytes": 968
    },
    "grok-study.raw.md": {
      "path": "grok-study.raw.md",
      "sha256": "1f30672fdf9f92e3ff045021b395941ad0eae2c792dc16382a728e86f51760ab",
      "bytes": 6288
    },
    "provider-comparison.md": {
      "path": "provider-comparison.md",
      "sha256": "8d43070ec28460c57843b6fb702e9eed531a00a3bdff68a69403aa451ea5d590",
      "bytes": 1041
    },
    "frozen-audit.prompt.md": {
      "path": "frozen-audit.prompt.md",
      "sha256": "cc89f826dab5ef98eb33afee7a823004c0a3ea6c7ff973ba891e6e61d05e9935",
      "bytes": 129127
    },
    "claude-frozen-audit.raw.md": {
      "path": "claude-frozen-audit.raw.md",
      "sha256": "6615c8ff7916b9eee46f114f14ea85593f20383167fe98fdc2cae2f8f95412a0",
      "bytes": 33148
    }
  },
  "constructibility": "blocked pending base change requests, registry drift, dependency pins and fixture execution",
  "localExtensionRegister": [
    {
      "field": "identifierIssuer",
      "status": "base-change-request"
    },
    {
      "field": "identifierSchemeVersion",
      "status": "base-change-request"
    },
    {
      "field": "identifierScope",
      "status": "base-change-request"
    },
    {
      "field": "identifierValidityAndStatus",
      "status": "base-change-request"
    },
    {
      "field": "linkState",
      "status": "base-change-request"
    },
    {
      "field": "authorisingRole",
      "status": "base-change-request"
    },
    {
      "field": "assertingSystem",
      "status": "base-change-request"
    }
  ],
  "requiredCompositionDisposition": [
    {
      "name": "Identifier assignment/correlation",
      "disposition": "included under restricted contract"
    },
    {
      "name": "Temporal/provenance support",
      "disposition": "required but unpinned; publication hold"
    },
    {
      "name": "Lawful-basis/disclosure service",
      "disposition": "required but unpinned; publication hold"
    },
    {
      "name": "Audit service",
      "disposition": "required but unpinned; publication hold"
    },
    {
      "name": "Subject-rights/retention service",
      "disposition": "required but unpinned; publication hold"
    }
  ],
  "identityAssurance": {
    "allowed": [
      "not-proofed",
      "proofed-with-level-and-expiry"
    ],
    "notProofedEffect": "cannot authorize elevation or deterministic merge"
  },
  "timePolicy": {
    "occurrenceOrEffective": "business validity",
    "registrationOrSource": "source authority recording",
    "knowledgeOrIngestion": "enterprise receipt",
    "fabricatedRegistrationTime": "forbidden"
  },
  "lifecyclePolicy": {
    "status": "provisional-non-canonical",
    "survivesArchive": [
      "identifiers",
      "tombstones",
      "name history",
      "link decisions",
      "disclosure logs"
    ]
  },
  "retentionPolicy": {
    "classes": [
      "source-binding",
      "name-history",
      "link-decision",
      "tombstone",
      "disclosure-log"
    ],
    "erasure": "minimize person reference while preserving required tombstone and audit continuity"
  },
  "projectionPolicy": {
    "relyingPartyClasses": [
      "person-self-service",
      "regulated-hr",
      "enterprise-directory",
      "assurance-review"
    ],
    "default": "deny",
    "unknownClass": "no projection",
    "predicatePreferred": true
  },
  "elementDisposition": {
    "administrativeSex": "out-of-profile governed reference",
    "genderRecognitionEffectiveDate": "out-of-profile governed reference",
    "selfIdentifiedGender": "person-controlled special-category only",
    "residence": "default-suppressed restricted kind",
    "biometricPointer": "special-category default-suppressed",
    "ContactPoint": "base-held WM-PER-001 finding in this dossier"
  },
  "providerVerdicts": {
    "Claude": "PROFILE with AccountBinding dependency outside base",
    "Grok": "restricted PROFILE; conditional fail for publication"
  },
  "v1MappingStatus": "all predecessor mappings candidate-not-normative and non-key",
  "digestAuditStatus": "recomputed by local process; frozen auditor verified none",
  "auditRemediation": {
    "auditVerdict": "REVISE",
    "checklistAppliedOnce": true,
    "checklistItemsApplied": "1-39",
    "auditRerun": false
  },
  "invalidationRule": "Any source, synthesis, registry, dependency, extension-register or provenance digest drift invalidates this candidate."
}