{"schema":"https://ver.cy/schemas/card/1.0.0","id":"vr.profile.enterprise-disclosure-review","code":"enterprise-disclosure-review","url":"https://ver.cy/models/enterprise-disclosure-review/","name":"Enterprise Disclosure Review","alternateNames":["Context Package Proposal","Disclosure classification and custody","EM-XCT-05","Joint Disclosure Review"],"kind":"enterprise-profile","status":"published","version":"0.1.0","language":"en","classifiers":{"family":"Enterprise profiles","category":"Cross-cutting context","entryKind":"companion-contract","plane":"","domain":["Enterprise","Disclosure review","Information governance"],"industry":["Cross-industry"],"navPath":"NAV.XCT","tags":["EM-XCT-05","disclosure","classification","projection","review","custody"],"facets":{}},"whatItIs":"A companion contract for a Company Dimension that describes exact packages of metadata projections proposed for disclosure and keeps attributed reviews of what their joint release could reveal, checked against the current context.","purpose":"Describe exact packages of single-object metadata projections, preserve attributed joint-disclosure reviews, and check their applicability under explicit current context.","scope":{"in":[],"out":[],"boundaries":[]},"distinguishingFeatures":["Reviews packages of metadata projections for joint disclosure risk, not single fields in isolation.","Checks that a review still applies under the current context and returns stale when inputs changed.","No review status is a grant: serving data needs a separate current authorization."],"structure":{"bundles":[{"id":"DR-B-identity","name":"Identity and classification","description":"Identity and classification for an exact metadata proposal and attributed joint review.","layers":[{"id":"DR-L-subject","name":"Objects and proposal boundary","description":"Objects and proposal boundary with explicit local and external responsibilities.","findings":[{"id":"DR-F01","name":"Which single object does each member describe?","description":"Coverage: local-structure; external identity truth.","questions":[{"text":"Which single object does each member describe?","id":"DR-Q01","kind":"governed-context"}]},{"id":"DR-F02","name":"Which exact source revision and schema were used?","description":"Coverage: local-equality; host resolution.","questions":[{"text":"Which exact source revision and schema were used?","id":"DR-Q02","kind":"governed-context"}]},{"id":"DR-F03","name":"Is this a projection, a package or a domain aggregate?","description":"Coverage: modeled boundary; calculation outside scope.","questions":[{"text":"Is this a projection, a package or a domain aggregate?","id":"DR-Q03","kind":"governed-context"}]}]},{"id":"DR-L-classification","name":"Classification references","description":"Classification references with explicit local and external responsibilities.","findings":[{"id":"DR-F04","name":"Which classification binds every selected field?","description":"Coverage: local cardinality; external binding interpretation.","questions":[{"text":"Which classification binds every selected field?","id":"DR-Q04","kind":"governed-context"}]},{"id":"DR-F05","name":"Who may correct or downgrade a classification?","description":"Coverage: host-only authority; no classification mutation.","questions":[{"text":"Who may correct or downgrade a classification?","id":"DR-Q05","kind":"governed-context"}]},{"id":"DR-F06","name":"Are schemes or compartments comparable?","description":"Coverage: deferred comparison engine.","questions":[{"text":"Are schemes or compartments comparable?","id":"DR-Q06","kind":"governed-context"}]}]}]},{"id":"DR-B-disclosure","name":"Proposed disclosure and current authority","description":"Proposed disclosure and current authority for an exact metadata proposal and attributed joint review.","layers":[{"id":"DR-L-shape","name":"Closed metadata shape","description":"Closed metadata shape with explicit local and external responsibilities.","findings":[{"id":"DR-F07","name":"Which fields are proposed for disclosure?","description":"Coverage: local declaration; no payload serving.","questions":[{"text":"Which fields are proposed for disclosure?","id":"DR-Q07","kind":"governed-context"}]},{"id":"DR-F08","name":"Can nested values introduce another object?","description":"Coverage: local syntax; scalar truth is host attestation.","questions":[{"text":"Can nested values introduce another object?","id":"DR-Q08","kind":"governed-context"}]},{"id":"DR-F09","name":"Can notes, identifiers, counts or errors reveal withheld facts?","description":"Coverage: manual assessment; no leakage detector.","questions":[{"text":"Can notes, identifiers, counts or errors reveal withheld facts?","id":"DR-Q09","kind":"governed-context"}]}]},{"id":"DR-L-authority","name":"Current authority and freshness","description":"Current authority and freshness with explicit local and external responsibilities.","findings":[{"id":"DR-F10","name":"What current grant permits this audience and purpose?","description":"Coverage: outside implementation; mandatory before serving.","questions":[{"text":"What current grant permits this audience and purpose?","id":"DR-Q10","kind":"governed-context"}]},{"id":"DR-F11","name":"Has context changed since assessment?","description":"Coverage: local exact comparison; host completeness.","questions":[{"text":"Has context changed since assessment?","id":"DR-Q11","kind":"governed-context"}]},{"id":"DR-F12","name":"May an earlier result be reused now?","description":"Coverage: local applicability; cache/atomic serving external.","questions":[{"text":"May an earlier result be reused now?","id":"DR-Q12","kind":"governed-context"}]}]}]},{"id":"DR-B-composition","name":"Joint review and aggregate boundaries","description":"Joint review and aggregate boundaries for an exact metadata proposal and attributed joint review.","layers":[{"id":"DR-L-membership","name":"Exact joint context","description":"Exact joint context with explicit local and external responsibilities.","findings":[{"id":"DR-F13","name":"Which exact component set was jointly reviewed?","description":"Coverage: local exact pinning.","questions":[{"text":"Which exact component set was jointly reviewed?","id":"DR-Q13","kind":"governed-context"}]},{"id":"DR-F14","name":"What combined inference risk was assessed?","description":"Coverage: local attribution; no inference proof.","questions":[{"text":"What combined inference risk was assessed?","id":"DR-Q14","kind":"governed-context"}]},{"id":"DR-F15","name":"Which earlier releases were considered?","description":"Coverage: local context binding; not all recipient knowledge.","questions":[{"text":"Which earlier releases were considered?","id":"DR-Q15","kind":"governed-context"}]}]},{"id":"DR-L-aggregate","name":"Domain aggregates and assessment scope","description":"Domain aggregates and assessment scope with explicit local and external responsibilities.","findings":[{"id":"DR-F16","name":"Who owns a source aggregate and its calculation?","description":"Coverage: outside implementation.","questions":[{"text":"Who owns a source aggregate and its calculation?","id":"DR-Q16","kind":"governed-context"}]},{"id":"DR-F17","name":"Which privacy mechanism or grain applies?","description":"Coverage: deferred privacy mechanisms.","questions":[{"text":"Which privacy mechanism or grain applies?","id":"DR-Q17","kind":"governed-context"}]},{"id":"DR-F18","name":"Does a review apply to another recipient or environment?","description":"Coverage: local binding; no transferable grant.","questions":[{"text":"Does a review apply to another recipient or environment?","id":"DR-Q18","kind":"governed-context"}]}]}]},{"id":"DR-B-continuity","name":"Continuity and custody","description":"Continuity and custody for an exact metadata proposal and attributed joint review.","layers":[{"id":"DR-L-storage","name":"Expiry and custody boundaries","description":"Expiry and custody boundaries with explicit local and external responsibilities.","findings":[{"id":"DR-F19","name":"When must serving stop versus evidence remain?","description":"Coverage: local review expiry only.","questions":[{"text":"When must serving stop versus evidence remain?","id":"DR-Q19","kind":"governed-context"}]},{"id":"DR-F20","name":"Who controls source, output, cache and backup copies?","description":"Coverage: outside implementation; opaque context pin.","questions":[{"text":"Who controls source, output, cache and backup copies?","id":"DR-Q20","kind":"governed-context"}]},{"id":"DR-F21","name":"Do retention, destruction deadlines and holds conflict?","description":"Coverage: deferred disposition engine.","questions":[{"text":"Do retention, destruction deadlines and holds conflict?","id":"DR-Q21","kind":"governed-context"}]}]},{"id":"DR-L-disposition","name":"Disposal and migration evidence","description":"Disposal and migration evidence with explicit local and external responsibilities.","findings":[{"id":"DR-F22","name":"Was disposal requested, executed or verified?","description":"Coverage: outside implementation.","questions":[{"text":"Was disposal requested, executed or verified?","id":"DR-Q22","kind":"governed-context"}]},{"id":"DR-F23","name":"What evidence may survive disposal?","description":"Coverage: outside implementation.","questions":[{"text":"What evidence may survive disposal?","id":"DR-Q23","kind":"governed-context"}]},{"id":"DR-F24","name":"Can the register migrate without losing meaning?","description":"Coverage: local roundtrip; cross-version migration deferred.","questions":[{"text":"Can the register migrate without losing meaning?","id":"DR-Q24","kind":"governed-context"}]}]}]}]},"agentConduct":{"may":["Validate the member grammar and pins of a disclosure package.","Record a concern about side channels and keep reports internal.","Return stale or insufficient-context when the current context differs."],"mustNot":["Treat a positive review as permission to disclose.","Invent calculated aggregate values.","Downgrade an opaque pin to make a review pass.","Reuse a review for a different revision or digest."],"requiresHuman":["Assessing rejected, inconclusive or conflicting reviews.","Deciding to disclose a package that combines sensitive fields."]},"ethics":{"considerations":["Combining harmless fields can re-identify people; joint review exists to prevent that.","Review reports themselves may reveal sensitive structure and must stay internal.","Over-disclosure harms people irreversibly; when in doubt the review must not pass."],"affectedParties":["People whose data could be re-identified","Recipients who rely on disclosed data"]},"owners":{"steward":"The information governance or privacy office stewards disclosure reviews; each data domain owns its own fields.","roles":[],"masterSystems":["Data catalogue with classification","Host authorization service"]},"relations":[{"target":"WM-XCT-002","type":"references","note":"0.3.0-research.1"},{"target":"WM-XCT-003","type":"references","note":"0.3.0-research.1"},{"target":"WM-XCT-020","type":"references","note":"0.3.0-research.1"},{"target":"WM-DAT-004","type":"references","note":"0.3.0-research.1"},{"target":"WM-KNW-012","type":"references","note":"0.3.0-research.1"},{"target":"vr.wm-xct-002","type":"aligned"},{"target":"vr.wm-xct-003","type":"aligned"},{"target":"vr.wm-xct-020","type":"aligned"},{"target":"vr.wm-dat-004","type":"aligned"},{"target":"vr.wm-knw-012","type":"aligned"}],"interaction":{"identity":{"applicability":"required","items":["Package ID with exact member pins.","Review ID bound to the package revision and digest."]},"properties":{"applicability":"not-applicable","items":[]},"recognition":{"applicability":"optional","items":["A disclosure review covers a named package of metadata projections and an attributed verdict."]},"capabilities":{"applicability":"required","items":["Validate exact member grammar; ask domain steward for identity evidence. Proposed operation only; requires the named host/domain authority.","Compare exact pins; request independently resolved source metadata. Proposed operation only; requires the named host/domain authority.","Keep member/package identities distinct; ask domain owner for aggregate calculation. Proposed operation only; requires the named host/domain authority.","Reject missing bindings; ask classification authority for pinned scheme and term. Proposed operation only; requires the named host/domain authority.","Request a governed correction; do not change an opaque pin as a downgrade. Proposed operation only; requires the named host/domain authority.","Host evaluator returns insufficient-context for unsupported comparison. Proposed operation only; requires the named host/domain authority. inspect() does not perform this check; applicable-review does not establish comparison or custody resolution.","Validate metadata selection; ask host for separate current serving authorization. Proposed operation only; requires the named host/domain authority.","Reject nested/wildcard field names; require separate member for another object. Proposed operation only; requires the named host/domain authority.","Record concern; keep reports internal; ask host to assess side channels. Proposed operation only; requires the named host/domain authority.","Request host decision; no review status establishes a grant. Proposed operation only; requires the named host/domain authority.","Compare all declared current inputs; return stale on disagreement. Proposed operation only; requires the named host/domain authority.","Reevaluate; retain old snapshot only as historical evidence. Proposed operation only; requires the named host/domain authority.","Refuse review for a different revision/digest; request new review after change. Proposed operation only; requires the named host/domain authority.","Keep rejection/inconclusive/conflict; request qualified human assessment. Proposed operation only; requires the named host/domain authority.","Request missing release history; stale if current context differs. Proposed operation only; requires the named host/domain authority.","Ask source domain owner; never invent calculated values here. Proposed operation only; requires the named host/domain authority.","Require a separately verified implementation and explicit limits. Proposed operation only; requires the named host/domain authority.","Return stale when context differs; obtain new proposal/review. Proposed operation only; requires the named host/domain authority.","Reevaluate review window; ask host to stop serving and custodian to decide retention. Proposed operation only; requires the named host/domain authority.","Identify missing custodian; request owner decision. Proposed operation only; requires the named host/domain authority.","Host evaluator returns insufficient-context until actual custodian resolves; perform no destruction. Proposed operation only; requires the named host/domain authority. inspect() does not perform this check; applicable-review does not establish comparison or custody resolution.","Keep unknown execution unknown; a marker is not destruction. Proposed operation only; requires the named host/domain authority.","Request authorized custody decision without perpetual-retention assumption. Proposed operation only; requires the named host/domain authority.","Roundtrip same version; refuse unsupported version conversion. Proposed operation only; requires the named host/domain authority."]},"hazards":{"applicability":"required","items":["Re-identification through combined fields.","Stale approval reused after the data changed."]},"interfaces":{"applicability":"required","items":["ISO/IEC 27701 privacy information management.","Statistical disclosure control practice."]},"context":{"applicability":"required","items":["Applies before company data is released inside or outside the organization."]}},"sources":[{"title":"Research record EM-XCT-05: independent provider studies, audits and reconciled findings","url":"https://ver.cy/enterprise/research/em-xct-05/","note":"Evidence behind the release; claims in the card trace to it."},{"title":"Enterprise Disclosure Review 0.1.0 specification","url":"https://ver.cy/models/enterprise-disclosure-review/versions/0.1.0/spec.json","note":"Normative release, digest sha256:208854fbc8c1737ec87acfa54c618b85a9efc1f619e109556d2df8c9267b5017"}],"openQuestions":["Use the pinned companion schema/validator and trusted-host binding. Native outer validation alone does not enforce nested semantics. Consult the released adoption limits."],"resources":{"spec":"/models/enterprise-disclosure-review/versions/0.1.0/spec.json","agents":"/models/enterprise-disclosure-review/versions/0.1.0/AGENTS.md","package":"/models/enterprise-disclosure-review/versions/0.1.0/enterprise-disclosure-review-0.1.0.zip","source":"https://ver.cy/enterprise/research/em-xct-05/"},"provenance":{"origin":"enterprise research","builtFrom":["models/enterprise-disclosure-review/versions/0.1.0/spec.json","models/enterprise-disclosure-review/catalogue-entry.json","ver-cy/world-models/card-supplements/enterprise-disclosure-review.json"],"providers":["Claude","Grok"],"researchStatus":"reviewable-draft","generatedAt":"","builder":"tools/build_cards.py@1.0.0"},"completeness":{"sections":{"classifiers":"filled","whatItIs":"filled","purpose":"filled","distinguishingFeatures":"filled","structure":"filled","agentConduct":"filled","ethics":"filled","owners":"filled","relations":"filled","interaction.identity":"filled","interaction.properties":"not-applicable","interaction.recognition":"filled","interaction.capabilities":"filled","interaction.hazards":"filled","interaction.interfaces":"filled","interaction.context":"filled","sources":"filled"},"notes":{"interaction.properties":"Institutional or informational subject: it has no physical body to measure.","_supplement":"Sections authored in card supplement 1.0.0 by Claude (Opus 5.5) (2026-10-05, unreviewed). Written from the published specification and established practice in the field; no new sources were read. Unreviewed."},"score":1.0}}