{"schema":"https://ver.cy/schemas/card/1.0.0","id":"vr.wm-xct-035","code":"wm-xct-035-retention-disposition","url":"https://ver.cy/models/wm-xct-035-retention-disposition/","name":"Retention / Disposition","alternateNames":[],"kind":"world-model","status":"published","version":"0.1.0","language":"en","classifiers":{"family":"World Models","category":"Cross-cutting context","entryKind":"mixin","plane":"","domain":["XCT.RET"],"industry":["Cross-industry"],"navPath":"NAV.XCT.RET","tags":["retention","disposition","xct.ret"],"facets":{}},"whatItIs":"Retention and disposition govern how long a record or data object is kept and what happens to it at the end: destruction, transfer to an archive or review. A retention rule names a trigger, a period, any legal holds and the evidence that disposition was carried out. It is a cross-cutting pattern applied to records of any kind, not a record type of its own.","purpose":"Attach accountable retention, hold, disposition and evidence context to an independently mastered subject.","scope":{"in":["Host-specific scope, schedule binding, trigger evidence, cutoff and external eligibility assessments","Scoped holds and releases, outcome authority and privacy reconciliation references","Transfer acceptance, destruction reports, residual copies, evidence continuity and review obligations"],"out":["Mastering host payloads, schedules, legal cases, reusable rule expressions, generic lifecycle or access-control machinery","Running policy or calendar engines, issuing legal decisions or holds, releasing holds, operating freezes, destroying data or media, transferring custody or executing backup remediation","Archival arrangement and preservation operations, domain-specific mandatory durations, universal legal precedence and operational handling of controlled items"],"boundaries":[{"neighbor":"WM-REC-001","distinction":"Host document or record master. Its content, identity and record lifecycle remain external; a non-document host must supply an equivalent pinned master binding."},{"neighbor":"WM-KNW-013","distinction":"Reusable constraint and requirement rule master owns expression, applicability and rule lifecycle. This mixin carries the selected revision and subject operands only."},{"neighbor":"WM-XCT-038","distinction":"External policy evaluator owns rule evaluation and explanation. Local functions record its input and output references without implementing its engine."},{"neighbor":"WM-XCT-021","distinction":"Generic host lifecycle and transition semantics remain external. Eligibility, hold and execution observations are distinct subject-specific axes."},{"neighbor":"WM-REC-010","distinction":"Approval and exception decision master owns authority, rationale and decision revision; attaching a decision does not issue or approve it."},{"neighbor":"WM-REC-015","distinction":"Optional archival fonds or collection owns accession, arrangement and preservation. This mixin references transfer scope and accepted custody."},{"neighbor":"WM-REC-011","distinction":"Evidence record master owns original attestation and evidence validity; retain only retention-specific links and assessment context here."},{"neighbor":"WM-REC-013","distinction":"Operational log master owns event persistence and audit-trail mechanisms. This mixin indexes relevant events without recreating logging infrastructure."}]},"distinguishingFeatures":["It is a cross-cutting rule applied to records of any type, not a record type itself.","A legal hold overrides the schedule and suspends disposition until released.","Disposition includes transfer to an archive, not only destruction.","The evidence of disposition is kept after the record itself is gone."],"structure":{"bundles":[{"id":"XCT035-B1","name":"Retention rule","description":"How long a record must be kept and why.","layers":[{"id":"XCT035-B1-L1","name":"Schedule and trigger","description":"The retention class, period and the event that starts it.","findings":[{"id":"XCT035-F01","name":"Retention class","description":"The schedule entry that applies to the record, with its legal or business basis.","questions":[{"text":"Which retention schedule entry applies to this record?","id":"XCT035-Q01"},{"text":"Which law, regulation or business need sets the period?","id":"XCT035-Q02"}]},{"id":"XCT035-F02","name":"Trigger and period","description":"The event that starts the retention period and its length.","questions":[{"text":"Which event starts the retention period, such as contract end or case closure?","id":"XCT035-Q03"},{"text":"Has the trigger occurred, and when does the period end?","id":"XCT035-Q04"}]}]}]},{"id":"XCT035-B2","name":"Holds","description":"What suspends disposition.","layers":[{"id":"XCT035-B2-L1","name":"Legal and other holds","description":"Holds that prevent disposition while they are in force.","findings":[{"id":"XCT035-F03","name":"Active hold","description":"A legal, audit or investigation hold placed on the record.","questions":[{"text":"Is the record under a legal or audit hold, and who placed it?","id":"XCT035-Q05"},{"text":"When was the hold last reviewed, and has it been released?","id":"XCT035-Q06"}]}]}]},{"id":"XCT035-B3","name":"Disposition","description":"What happens at the end and how it is proven.","layers":[{"id":"XCT035-B3-L1","name":"Action and evidence","description":"The disposition action and the record that proves it.","findings":[{"id":"XCT035-F04","name":"Disposition action","description":"Whether the record is destroyed, transferred to an archive or reviewed.","questions":[{"text":"Which disposition action does the schedule prescribe?","id":"XCT035-Q07"},{"text":"Who authorised the disposition?","id":"XCT035-Q08"}]},{"id":"XCT035-F05","name":"Disposition evidence","description":"Proof of when and how the disposition was carried out, including copies and backups.","questions":[{"text":"Is there a certificate or log showing when and how the record was disposed of?","id":"XCT035-Q09"},{"text":"Were copies and backups disposed of as well?","id":"XCT035-Q10"}]}]}]}]},"agentConduct":{"may":["Assign retention classes to records according to the approved schedule.","Compute disposition dates from triggers and periods.","Report records that are due for disposition or kept beyond their period.","Keep disposition logs."],"mustNot":["Destroy records under a legal or audit hold.","Dispose of records without the authorisation the schedule requires.","Delete disposition evidence.","Keep personal data beyond its retention period without a lawful basis.","Change a retention schedule on its own."],"requiresHuman":["Approving a retention schedule or a change to it.","Authorising destruction of records.","Placing or releasing a legal hold."]},"ethics":{"considerations":["Keeping personal data too long increases privacy risk, while deleting too early can destroy evidence people need.","Destruction of records under hold can obstruct justice.","Transfer to archives preserves public memory and accountability."],"affectedParties":["People whose data is held in records","Organisations bound by retention duties","Courts, auditors and regulators","Archives and future researchers"]},"owners":{"steward":"The records manager or information governance function that maintains the retention schedule.","roles":[{"name":"Records steward","responsibilities":["Maintain accurate scope and schedule references and route unknown applicability for review."]},{"name":"Competent disposition authority","responsibilities":["Approve or refuse outcomes through the external decision process; assess unresolved legal conflicts."]},{"name":"Hold authority","responsibilities":["Issue and release notices in the external matter process and define precise covered scope."]},{"name":"Custodian or executor","responsibilities":["Acknowledge notices and supply scoped execution or transfer evidence under separate authorization."]},{"name":"Privacy reviewer","responsibilities":["Assess purpose, minimisation and erasure exceptions through the applicable qualified process."]},{"name":"Evidence reviewer","responsibilities":["Check attestation coverage, partial outcomes and residual copies independently of reported execution where the profile requires."]}],"masterSystems":["Records management system","Retention schedule register","Legal hold management tool"]},"relations":[{"target":"WM-REC-001","type":"references","note":"Host document or record master. Its content, identity and record lifecycle remain external; a non-document host must supply an equivalent pinned master binding."},{"target":"WM-KNW-013","type":"references","note":"Reusable constraint and requirement rule master owns expression, applicability and rule lifecycle. This mixin carries the selected revision and subject operands only."},{"target":"WM-XCT-038","type":"references","note":"External policy evaluator owns rule evaluation and explanation. Local functions record its input and output references without implementing its engine."},{"target":"WM-XCT-021","type":"references","note":"Generic host lifecycle and transition semantics remain external. Eligibility, hold and execution observations are distinct subject-specific axes."},{"target":"WM-REC-010","type":"references","note":"Approval and exception decision master owns authority, rationale and decision revision; attaching a decision does not issue or approve it."},{"target":"WM-REC-015","type":"references","note":"Optional archival fonds or collection owns accession, arrangement and preservation. This mixin references transfer scope and accepted custody."},{"target":"WM-REC-011","type":"references","note":"Evidence record master owns original attestation and evidence validity; retain only retention-specific links and assessment context here."},{"target":"WM-REC-013","type":"references","note":"Operational log master owns event persistence and audit-trail mechanisms. This mixin indexes relevant events without recreating logging infrastructure."},{"target":"PROV-O","type":"aligned","note":"Conceptual mapping of subject, activity, agent, revision and invalidation references; an invalidation assertion is not a destruction certificate."},{"target":"PREMIS 3.0","type":"aligned","note":"Overview-level preservation object, event, rights and agent alignment. No schema or archival repository conformance is asserted."},{"target":"WM-REC-001","type":"neighbor","note":"Host document or record master. Its content, identity and record lifecycle remain external; a non-document host must supply an equivalent pinned master binding."},{"target":"WM-KNW-013","type":"neighbor","note":"Reusable constraint and requirement rule master owns expression, applicability and rule lifecycle. This mixin carries the selected revision and subject operands only."},{"target":"WM-XCT-038","type":"neighbor","note":"External policy evaluator owns rule evaluation and explanation. Local functions record its input and output references without implementing its engine."},{"target":"WM-XCT-021","type":"neighbor","note":"Generic host lifecycle and transition semantics remain external. Eligibility, hold and execution observations are distinct subject-specific axes."},{"target":"WM-REC-010","type":"neighbor","note":"Approval and exception decision master owns authority, rationale and decision revision; attaching a decision does not issue or approve it."},{"target":"WM-REC-015","type":"neighbor","note":"Optional archival fonds or collection owns accession, arrangement and preservation. This mixin references transfer scope and accepted custody."},{"target":"WM-REC-011","type":"neighbor","note":"Evidence record master owns original attestation and evidence validity; retain only retention-specific links and assessment context here."},{"target":"WM-REC-013","type":"neighbor","note":"Operational log master owns event persistence and audit-trail mechanisms. This mixin indexes relevant events without recreating logging infrastructure."},{"target":"wm-rec-001-document-record","type":"references","note":"Retention rules apply to documents and records."},{"target":"wm-xct-021-lifecycle-status","type":"related","note":"Disposition ends the lifecycle of a record."},{"target":"wm-rec-015-archival-fonds-collection","type":"related","note":"Records transferred for permanent keeping join archival fonds."}],"interaction":{"identity":{"applicability":"required","items":["A retention rule is identified by its schedule and class code.","Holds are identified by the matter or case reference that requires them.","Disposition events are identified by the disposition log entry or certificate number."]},"properties":{"applicability":"not-applicable","items":[]},"recognition":{"applicability":"optional","items":["A retention rule names a record class, a trigger, a period and a disposition action.","Often confused with backup policies, archival storage tiers or access control."]},"capabilities":{"applicability":"required","items":["Disposition dates can be computed from triggers and periods.","Holds can suspend disposition for selected records.","Disposition can be executed and evidenced in batches."]},"hazards":{"applicability":"required","items":["Spoliation of evidence by destroying records under hold.","Privacy breaches from over-retention.","Copies and backups that escape disposition."]},"interfaces":{"applicability":"required","items":["ISO 15489 records management concepts.","MoReq2010 and DoD 5015.2 for records management system requirements.","Legal hold and eDiscovery processes."]},"context":{"applicability":"required","items":["Data protection laws require storage limitation, while sector laws require minimum retention periods.","Applies across public bodies, companies and archives."]}},"sources":[{"title":"Implementing Schedules","url":"https://www.archives.gov/records-mgmt/scheduling/implementation","note":"National Archives and Records Administration"},{"title":"Scheduling Records","url":"https://www.archives.gov/records-mgmt/scheduling/sch-records","note":"National Archives and Records Administration"},{"title":"Federal Records Centers Program Freeze Process Overview / FAQ","url":"https://www.archives.gov/frc/arcis/freeze-faq","note":"National Archives and Records Administration"},{"title":"Principle (e): Storage limitation","url":"https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/data-protection-principles/a-guide-to-the-data-protection-principles/storage-limitation/","note":"Information Commissioner's Office"},{"title":"Right to erasure","url":"https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/individual-rights/right-to-erasure/","note":"Information Commissioner's Office"},{"title":"SP 800-88 Rev. 2, Guidelines for Media Sanitization","url":"https://csrc.nist.gov/pubs/sp/800/88/r2/final","note":"National Institute of Standards and Technology"},{"title":"PROV-O: The PROV Ontology","url":"https://www.w3.org/TR/prov-o/","note":"World Wide Web Consortium"},{"title":"PREMIS Data Dictionary for Preservation Metadata, Version 3.0","url":"https://www.loc.gov/standards/premis/v3/index.html","note":"Library of Congress"},{"title":"ISO 15489-1 Information and documentation - Records management, ISO"},{"title":"General Data Protection Regulation (EU) 2016/679, Article 5(1)(e) storage limitation, European Union"}],"openQuestions":["Reconcile source versions and current consolidated legal rules with each adopting jurisdiction and sector profile, including multiple duties, scoped holds and privacy exceptions.","Build nested instance schemas and adversarial fixtures for unknown triggers, calendar boundaries, concurrent holds, partial releases, stale approvals, partial batches, backup restoration and minimal evidence retention.","Pin and test host, rule, evaluator, decision, archive and evidence interfaces with loss-aware mappings and authorized execution boundaries.","Obtain independent external review before any canonical or publishable-draft promotion.","Jurisdiction- and sector-specific schedules, qualified legal precedence and current consolidated law are not supplied.","Full NIST sanitization procedures and PREMIS dictionary/schema conformance were not reviewed; no technical destruction recipe is supplied.","Nested field schemas, date arithmetic engine, live integrations, pinned neighbor specifications and executable instance fixtures are absent.","Actual backup inventories, cryptographic key dependencies, distributed propagation and restore-time remediation need system-specific operational evidence.","No independently authored second-provider research exists for this run."],"resources":{"spec":"/models/wm-xct-035-retention-disposition/spec.yaml","agents":"/models/wm-xct-035-retention-disposition/AGENTS.md","source":"https://github.com/ver-cy/world-models/tree/feat/mega-model-registry/research/runs/wm-xct-035"},"provenance":{"origin":"world-models research","builtFrom":["models/wm-xct-035-retention-disposition/spec.yaml","ver-cy/world-models/card-supplements/wm-xct-035-retention-disposition.json"],"providers":["Codex"],"researchStatus":"reviewable-draft","generatedAt":"2026-10-06T12:44:12Z","builder":"tools/build_cards.py@1.0.0"},"completeness":{"sections":{"classifiers":"filled","whatItIs":"filled","purpose":"filled","distinguishingFeatures":"filled","structure":"filled","agentConduct":"filled","ethics":"filled","owners":"filled","relations":"filled","interaction.identity":"filled","interaction.properties":"not-applicable","interaction.recognition":"filled","interaction.capabilities":"filled","interaction.hazards":"filled","interaction.interfaces":"filled","interaction.context":"filled","sources":"filled"},"notes":{"interaction.properties":"The subject is an institutional or informational record, not a physical object with measurable properties.","_supplement":"Sections authored in card supplement 1.0.0 by Claude (Opus 5.5) (2026-10-06, unreviewed). Written from the card's existing content and established practice in the field; no new sources were read. Unreviewed."},"score":1.0}}