World Models · public research draft

Person

Model the natural person as a civil-identity anchor and life-course subject: a stable, referenceable identity that carries registered core attributes, scheme-qualified identifiers, evidence of identity, legal standing, life-event anchors and person-controlled personal-sphere data, so every other model can reference persons without copying them.

AI YAMLAGENTS.mdResearch evidence
Research draft. The Claude + Grok synthesis is public for review and use with caution. It passed structural validation but is not yet a canonical Vercy release because the source and coverage holds below remain open.
Catalogue IDWM-PER-001
Version0.3.0-research.1
Previous version-
Typeentity
ValidationPassed
Synthesis digestsha256:ffefc6ce9cf9d7c6…
26Sources
7Bundles
14Layers
29Findings
103Questions
31Artifacts
Format-independent logical structure

Bundles → Layers → Findings → Questions + Artifacts

civil-identity-coreCivil identity core2 layers

The registered identity itself: the anchor that other models reference, and the core attributes a registrar establishes and maintains about it.

identity-anchorIdentity anchor and record identity3 findings

What the person entity is, how it is uniquely referenced within a domain, and how multiple records claiming the same person are reconciled.

person-identity-anchor

Person identity anchor

The natural person as a persistent entity distinct from any record, identifier, document or credential about them, carrying the reference identifier every other model points to.

Questions
  1. Which identifier is the reference identifier for this person, and which authority guarantees its persistence and non-reuse?identity
    Expected answer
    • reference identifier value pointer
    • issuing authority reference
    • persistence and non-reuse policy statement
  2. Does this record denote the natural person, or a registration record about the person?definition
    Expected answer
    • record subject kind code
    • record-to-entity link
    • registering system reference
  3. Within which domain of applicability is this identity asserted unique and resolvable?classification
    Expected answer
    • domain of applicability name
    • uniqueness assertion scope
    • resolution endpoint or registry reference
  4. If no authoritative master-system identifier exists for this person, which fallback identifier is assigned, by whom, and why was the authoritative one unavailable?exception
    Expected answer
    • fallback identifier kind (governed IRI, UUID or ULID)
    • assigning Dimension reference
    • recorded reason the authoritative identifier is absent
Artifacts
  • Person anchor recordThe minimal governed record establishing the person as a referenceable entity, its reference identifier, origin class and domain of applicability.
duplicate-detection-and-merge

Duplicate detection, merge and split

Several records may describe one person across systems; the model must express same-as links, merge, supersession and split without destroying history or silently unifying distinct people.

Questions
  1. Which other person records are asserted to denote the same natural person, and with what link type and direction?relationship
    Expected answer
    • linked record reference
    • link type code (replaces, replaced-by, refer, see-also)
    • asserting system reference
  2. What evidence and matching threshold justified this merge, and which role authorised it?evidence
    Expected answer
    • matching attribute set and scores
    • decision threshold applied
    • authorising role and decision timestamp
  3. How is an incorrect merge reversed, and what happens to identifiers and credentials issued under the superseded record?exception
    Expected answer
    • reversal procedure reference
    • superseded identifier resolution policy
    • downstream notification list
Artifacts
  • Record linkage decision recordDurable record of a merge, split or same-as assertion: inputs compared, confidence, threshold, authorising role, outcome and reversal path.
alternative-registration-routes

Exceptional identity paths

UN LIA explicitly covers persons whose birth was not registered and refugees whose proof of legal identity may be issued by the host State or an internationally mandated authority. Statelessness is a named UN LIA concern. National CRVS practice also includes foundlings, unknown parentage, incomplete dates, delayed registration and, in some jurisdictions, presumed death and later identity restoration. Those last national cases are recorded here as operating needs with incomplete global normative detail.

Questions
  1. Is proof of legal identity issued by a host State or by an internationally mandated authority for a refugee or similar status, and how does it link to this person?exception
    Expected answer
    • proof-issuer-kind (host-state | internationally-mandated-authority)
    • issuer-id
    • credential-type
    • person-id
    • issued-at (RFC 3339)
    • national-law-recognition (boolean)
  2. Was this identity opened for a foundling or person of unknown parentage, and which placeholder name and birth facts were assigned?exception
    Expected answer
    • foundling-or-unknown-parentage (boolean)
    • assigned-name
    • assigned-birth-date-or-estimate
    • assigned-place
    • legal-basis-ref
    • later-rectification-id
  3. Has legal identity been retired by presumed death or later restored, and what is the current vital status?lifecycle
    Expected answer
    • presumed-death-order-id
    • presumed-death-at (RFC 3339)
    • restored (boolean)
    • restoration-order-id
    • current-vital-status
    • gap-flag (global-norm-incomplete)
Artifacts
  • Refugee or mandated identity credentialProof of legal identity issued by a State or internationally mandated authority.
registered-core-attributesRegistered core attributes3 findings

The attributes a civil registrar establishes and maintains: legal names over time, birth facts, and the administratively recorded sex or legally recognised gender.

birth-facts-record

Registered birth facts

Date, precision, place and, where recorded, time of birth as registered, plus multiple-birth order, distinguished from the place and date of registration.

Questions
  1. What is the registered date of birth and at what precision is it known?temporal
    Expected answer
    • birth date value
    • precision code (day, month, year, estimated)
    • estimation basis where the date is approximate
  2. What is the registered place of birth, at which administrative granularity, and does it differ from the place of registration?spatial
    Expected answer
    • place of birth reference and granularity
    • place of registration reference
    • country code of occurrence
  3. Was this birth part of a multiple birth, and what birth order was registered?measurement
    Expected answer
    • multiple birth indicator
    • birth order number
    • total births in the delivery where recorded
  4. Which registration act established these facts, and how must a correction to them be evidenced?provenance
    Expected answer
    • birth registration act reference
    • registrar reference
    • correction evidence requirement
Artifacts
  • Birth registration extractCertified extract of the birth registration evidencing the registered birth facts and the registering authority.
sex-and-gender-recording

Sex and gender recording

Administratively recorded sex, legal gender recognition and self-identified gender are three distinct values with different code lists, owners and disclosure rules.

Questions
  1. Which code list and version encodes the administratively recorded sex, and what does each value mean in that list?classification
    Expected answer
    • code list reference and version
    • code value
    • value meaning in the issuing jurisdiction
  2. Is a self-identified gender recorded separately from administrative sex, and who controls that value?ownership
    Expected answer
    • self-identified gender value
    • controlling party
    • registrar warranty flag (self-declared, not registered)
  3. Has a legal gender recognition changed the registered value, and from which date does the change take effect?lifecycle
    Expected answer
    • prior and new registered value
    • recognition decision reference
    • effective date of the change
  4. Which of these values may be disclosed to which relying-party class, given the sensitivity of gender data?privacy
    Expected answer
    • per-value disclosure rule
    • relying-party class
    • lawful condition for release
Artifacts
  • Gender recognition decision referenceReference to the administrative or judicial decision that changed the registered value, retained as evidence of the transition.
identifiers-and-evidenceIdentifiers and evidence2 layers

Scheme-qualified identifiers assigned to the person, the documents and attestations that evidence identity, and the assurance produced by proofing.

identifier-schemesIdentifier schemes and correlation2 findings

How identifiers are assigned under named schemes with authorities and validity, and how their correlation properties are governed.

identifier-assignment

Scheme-qualified identifier assignment

An identifier attaches to the person under a named scheme with an assigning authority, validity period, format rule and reuse policy, without becoming the person.

Questions
  1. Under which named scheme was this identifier assigned, and by which authority?authority
    Expected answer
    • scheme name and version
    • assigning authority reference
    • scheme governing jurisdiction
  2. What is the identifier's validity period, and may it be revoked, reissued or reused for a different person?lifecycle
    Expected answer
    • validity start and end
    • revocation state and reason
    • reuse policy code
  3. Is this identifier a reference identifier for the person or a scoped, derived or sector-limited identifier?classification
    Expected answer
    • identifier role code
    • scope of applicability
    • relationship to the reference identifier
  4. Which format, checksum or registry lookup validates this identifier value?validation
    Expected answer
    • format or pattern rule
    • check-digit algorithm
    • authoritative verification endpoint or procedure
Artifacts
  • Identifier assignment recordRecord of one identifier assignment: scheme, authority, value pointer, validity, revocation state and reuse policy.
identifier-correlation

Identifier correlation and pseudonymity

Cross-domain identifiers make a person correlatable across contexts; the model must record correlatability class and any pairwise or sector-specific pseudonym derivation.

Questions
  1. Which of this person's identifiers are correlatable across domains, and what harm follows from that linkage?privacy
    Expected answer
    • correlatability class per identifier
    • known linkage surfaces
    • assessed harm and mitigation
  2. Where a pairwise or sector-specific pseudonym is required, how is it derived, scoped and rotated?security
    Expected answer
    • derivation method reference
    • scope binding (relying party or sector)
    • rotation trigger and period
  3. Which identifiers may be omitted entirely from a given presentation without breaking verification?access
    Expected answer
    • omissible identifier list per projection
    • verification method that survives omission
    • residual risk note
Artifacts
  • Pseudonymous identifier policy statementPublished statement of which identifier classes are used for which relying-party classes, with derivation, scoping and rotation rules.
identity-evidence-and-assuranceIdentity evidence and assurance2 findings

Issued documents and electronic attestations that evidence identity, and the proofing process that produces an assurance level.

issued-identity-evidence

Issued identity evidence

Physical documents and electronic attestations evidence a registered identity and assert a subset of attributes; they never constitute the person and their revocation does not revoke the person.

Questions
  1. What type of evidence is this, who issued it, and over which validity period?evidence
    Expected answer
    • evidence type code
    • issuer reference
    • validFrom and validUntil values
  2. What is its current status: valid, expired, suspended, revoked, lost or stolen, and where is that status published?state
    Expected answer
    • status code and effective time
    • status reason
    • status list or revocation endpoint reference
  3. Which person attributes does this evidence assert, and which of those are authoritative rather than copied from another source?provenance
    Expected answer
    • asserted attribute set
    • per-attribute authoritativeness flag
    • upstream source reference for copied attributes
  4. How is the evidence bound to the holder, cryptographically or physically?security
    Expected answer
    • holder binding method code
    • binding proof reference
    • binding strength assessment
Artifacts
  • Identity document recordRecord of an issued physical identity document with issuer, number reference, validity, machine-readable form and status.
  • Verifiable attestationElectronic credential asserting person attributes, with issuer, validity window, status mechanism, schema reference and proof.
identity-proofing-assurance

Identity proofing and assurance

The recorded outcome of resolving, validating and verifying a claimed identity against evidence, expressed as an assurance level with an expiry and an optional biometric reference.

Questions
  1. At which identity assurance level was this person proofed, and against which published criteria and version?quality
    Expected answer
    • assurance level value
    • criteria document reference and version
    • assessing party reference
  2. Which resolution, validation and verification steps were performed, and with what outcome for each?process
    Expected answer
    • step list with outcomes
    • evidence items used per step
    • failure or fallback notes
  3. Which biometric reference, if any, was captured, in which encoding, and where is it stored?measurement
    Expected answer
    • biometric modality and encoding standard
    • reference storage location or pointer
    • capture quality score
  4. When does this proofing outcome expire or require re-proofing, and what event forces early re-proofing?temporal
    Expected answer
    • proofing timestamp
    • re-proofing due date
    • re-proofing trigger events
Artifacts
  • Identity proofing assessment recordDurable record of a proofing event: criteria, evidence, steps, outcomes, assurance level, assessor and timestamps.
legal-standingLegal standing3 layers

The person's status in law: civil status, nationality or statelessness, legal capacity and any representation or support arrangement.

civil-statusCivil status1 findings

The registered civil or marital status, its effective date, governing jurisdiction and causing act.

civil-status-registration

Registered civil status

One current registered civil status per person with an effective date and governing jurisdiction; history is carried by the acts that changed it, not by overwriting the value.

Questions
  1. What is the currently registered civil status, from which effective date, and under which jurisdiction's law?state
    Expected answer
    • civil status code and code list reference
    • effective date
    • governing jurisdiction code
  2. Which registered act caused the most recent change of civil status?event
    Expected answer
    • causing act type (marriage, divorce, annulment, judicial separation, death of spouse)
    • act reference in the vital-event model
    • registering authority reference
  3. How is a civil status established under foreign law recognised here, and what evidence is required?exception
    Expected answer
    • recognition procedure reference
    • required evidence set
    • recognition decision and date
Artifacts
  • Civil status extractCertified extract evidencing the registered civil status, its effective date and the causing act.
nationality-and-statelessnessNationality and statelessness2 findings

Nationalities held, their basis and dates, and the distinct determination of statelessness or undetermined nationality.

nationality-holding

Nationality holding

Zero, one or several nationalities held by the person, each with a coding, acquisition basis, dates and conferring authority.

Questions
  1. Which nationalities does the person hold, in which coding scheme, and from which dates?identity
    Expected answer
    • nationality country code and coding scheme
    • acquisition date
    • loss or renunciation date where applicable
  2. Which authority conferred or withdrew each nationality, and on what legal basis?authority
    Expected answer
    • conferring or withdrawing authority reference
    • legal basis code (birth, descent, naturalisation, other)
    • decision reference
  3. Where several nationalities are held, which one governs a given official interaction?decision
    Expected answer
    • governing nationality per interaction context
    • selection rule reference
    • evidence presented
Artifacts
  • Nationality evidence referencePointer to the naturalisation decision, passport issuance or civil-register entry evidencing a nationality.
statelessness-determination

Statelessness and undetermined nationality

Determined statelessness, undetermined nationality and simply unrecorded nationality are three different states with different consequences for document issuance.

Questions
  1. Is the person determined stateless, of undetermined nationality, or is nationality merely unrecorded?classification
    Expected answer
    • nationality determination status code
    • basis for the classification
    • date of assessment
  2. Which authority made the determination, when, and under which procedure?authority
    Expected answer
    • determining authority reference
    • procedure reference
    • determination decision identifier and date
  3. Which substitute documents or registration routes establish legal identity where no nationality-based document exists?exception
    Expected answer
    • substitute document references
    • alternative registration route
    • validity and renewal conditions
Artifacts
  • Statelessness determination recordRecord of the determination procedure, evidence considered, outcome, authority and review date.
capacity-and-representationLegal capacity and representation2 findings

The person's legal capacity state and any arrangement by which another party supports or acts for them.

representation-arrangement

Representation and support arrangement

An arrangement by which a person or organization supports or acts for the person, distinguishing supported from substituted decision-making and recording the person's own will and preferences.

Questions
  1. Who acts for or supports the person, in which capacity, and with what scope of authority?authority
    Expected answer
    • representative reference (person or organization)
    • representation capacity code
    • enumerated scope of authority
  2. Is the arrangement supported decision-making or substituted decision-making, and how is that recorded?classification
    Expected answer
    • arrangement type code
    • legal basis reference
    • safeguards recorded
  3. When does the arrangement start, end or require renewal, and who may terminate it?lifecycle
    Expected answer
    • start and end dates
    • renewal condition
    • parties entitled to terminate
  4. How are the person's own expressed will and preferences recorded alongside the representative's acts?evidence
    Expected answer
    • will and preference statement reference
    • date and method of capture
    • conflict resolution note
Artifacts
  • Representation mandate recordThe mandate, order or power of attorney establishing the arrangement, its scope, safeguards and duration.
life-courseLife course2 layers

The person through time: anchors to registered life events, the separation of occurrence time from record time, vital status and the lifecycle of the identity record itself.

life-event-anchoringLife event anchoring and time2 findings

How registered life events attach to the person and how occurrence, registration and ingestion times are kept apart.

life-event-anchor

Vital and registered life event anchor

The person carries typed anchors to life events resolved in the vital-event model, together with the role the person played in each event.

Questions
  1. Which vital or registered life events anchor to this person, and in which model does each event resolve?relationship
    Expected answer
    • event anchor references
    • event type codes
    • resolving model reference per anchor
  2. What role does the person play in each anchored event: subject, parent, spouse, informant or declarant?classification
    Expected answer
    • role code per anchor
    • role evidence reference
    • role validity
  3. Which anchors are mandatory for a complete civil identity in this jurisdiction, and which are optional?requirement
    Expected answer
    • mandatory anchor list
    • optional anchor list
    • jurisdiction reference
Artifacts
  • Life event anchor indexThe person-side index of event anchors with types, roles and resolving model references, produced for navigation without copying event content.
event-time-versus-record-time

Occurrence time versus record time

Every person fact carries a time of occurrence, a time of registration and a time of ingestion; conflating them corrupts history and prevents lawful correction.

Questions
  1. What are the occurrence time, the registration time and the ingestion time for this fact, and are they stored separately?temporal
    Expected answer
    • occurrence date or timestamp
    • registration timestamp
    • observation or ingestion timestamp
  2. Which values carry an explicit UTC offset or Z, and which are deliberately dates without a time zone?validation
    Expected answer
    • per-field temporal type
    • offset or Z value where applicable
    • precision declaration for date-only facts
  3. How are late, retroactive or back-dated registrations represented without rewriting existing history?provenance
    Expected answer
    • effective period of the new assertion
    • superseded assertion reference
    • reason for late registration
  4. Which time value governs when two sources disagree about when a fact took effect?decision
    Expected answer
    • precedence rule reference
    • governing source
    • recorded discrepancy note
Artifacts
  • Bitemporal change log entryOne entry recording a value change with occurrence, registration and ingestion times, the superseded assertion and the change reason.
vital-status-and-record-lifecycleVital status and record lifecycle2 findings

Whether the person is living, deceased or presumed dead, and which lifecycle state the identity record itself occupies.

vital-status-and-death

Vital status and death registration

Vital status is an evidenced state; registered death, judicially declared death and presumed death are distinct and must not be collapsed.

Questions
  1. What is the person's current vital status and what evidence supports it?state
    Expected answer
    • vital status code
    • evidence reference
    • status assertion timestamp
  2. For a registered death, what are the date, time and place of death, and how do they differ from the date and place of registration?temporal
    Expected answer
    • date and time of death with precision
    • place of death reference
    • date and place of registration
  3. How is a presumed or judicially declared death represented differently from a registered death?exception
    Expected answer
    • determination basis code
    • declaring authority and decision reference
    • reversal procedure if the person is found living
  4. Which downstream references, identifiers and credentials must be notified or closed when death is registered?process
    Expected answer
    • notification target list
    • credential and identifier closure actions
    • closure completion evidence
Artifacts
  • Death registration extractCertified extract evidencing the registered death, its date and place, and the registering authority; cause of death is excluded from this model.
identity-record-lifecycle

Identity record lifecycle state

The identity record moves through governed states such as established, active, suspended and archived; transitions carry an authority, a reason and a timestamp.

Questions
  1. Which lifecycle state is the identity record in, and which published state vocabulary defines it?lifecycle
    Expected answer
    • current state value
    • state vocabulary reference and version
    • state entry timestamp
  2. Who may suspend, reactivate or archive an identity record, and on which grounds?authority
    Expected answer
    • authorised role per transition
    • permitted grounds
    • approval evidence reference
  3. After archiving, what remains resolvable and what is destroyed?retention
    Expected answer
    • retained element set
    • destroyed element set
    • tombstone resolution behaviour
Artifacts
  • Lifecycle transition logAppend-only log of identity record state transitions with authority, ground, evidence and RFC 3339 timestamps.
personal-spherePersonal sphere1 layers

Data the person declares and controls: contact points, declared residence pointer, self-declared attributes and communication preferences.

contact-presence-and-declarationsContact, presence and declarations3 findings

Person-controlled reachability, residence pointer and self-declared attributes, each explicitly flagged as unwarranted by any registrar.

person-controlled-contact-point

Person-controlled contact point

A channel through which the person can be reached, owned and revocable by the person, with a verification state and per-purpose usage limits.

Questions
  1. What channel type and value does this contact point use, and has the value been verified?definition
    Expected answer
    • channel type code
    • value pointer
    • verification state and timestamp
  2. Who controls this contact point and for which purposes may it be used?ownership
    Expected answer
    • controlling party
    • permitted purposes
    • purpose limitation basis
  3. What visibility or disclosure setting applies, and can it differ per relying party?access
    Expected answer
    • visibility setting code
    • per-relying-party overrides
    • last change timestamp
Artifacts
  • Contact point verification recordRecord of a reachability or control check on a contact point, with method, outcome and timestamp.
declared-residence-pointer

Declared residence pointer

A typed pointer to an address resolved in the place model, distinguishing legal domicile, registered residence and self-declared mailing address from statistical usual residence.

Questions
  1. Which address does the person declare or stand registered at, and in which model does that address resolve?spatial
    Expected answer
    • address reference
    • resolving model reference
    • country and administrative area codes
  2. Is this a legal domicile, a registered residence or a self-declared mailing address?classification
    Expected answer
    • residence kind code
    • declaring or registering party
    • warranty flag
  3. Over which period was it valid and who may change it?temporal
    Expected answer
    • validity start and end
    • change authority
    • last change timestamp
Artifacts
  • Residence declaration recordRecord of a residence declaration or registration change, with declaring party, effective date and evidence reference.
self-declared-attributes

Self-declared attributes and preferences

Values supplied solely by the person, including communication and accessibility preferences, carrying no registrar warranty and always distinguishable from verified values in any projection.

Questions
  1. Which attributes are declared solely by the person and carry no authority warranty?provenance
    Expected answer
    • self-declared attribute list
    • declaration timestamps
    • assurance flag per attribute
  2. Which language and communication preferences apply, including accessible formats the person requires?quality
    Expected answer
    • preferred language codes with preference order
    • accessible format needs
    • interpretation or assistance requirement
  3. How is a self-declared value distinguished from an authority-verified value in every projection that carries it?interoperability
    Expected answer
    • assurance marker representation
    • projection rule reference
    • behaviour when the target schema has no assurance field
  4. Which self-declared values may the person unilaterally change, hide or delete?ownership
    Expected answer
    • per-attribute change rights
    • hide and delete rights
    • propagation behaviour to prior recipients
Artifacts
  • Self-declaration statementThe person's recorded declaration of attributes and preferences, timestamped and attributable to the person alone.
personal-data-governancePersonal data governance2 layers

Lawful basis and consent, subject-right execution, minimal disclosure, retention, erasure and disclosure audit over person data.

lawful-basis-and-subject-rightsLawful basis and subject rights2 findings

Why each processing purpose is permitted, how consent is scoped and withdrawn, and how subject-right requests are executed.

subject-rights-execution

Subject right execution

How access, rectification, erasure, restriction, portability and objection requests are received, decided, executed and evidenced, including lawful refusal.

Questions
  1. Which right was exercised, when, by whom, and with what outcome?process
    Expected answer
    • right type code
    • request and decision timestamps
    • requesting party and verification of their identity
  2. Which data can the person rectify directly and which requires a registrar act?authority
    Expected answer
    • directly rectifiable element list
    • registrar-only element list
    • escalation path
  3. Which records are exportable in a portable form and which are excluded, and why?interoperability
    Expected answer
    • exportable element list and format
    • excluded element list
    • exclusion ground
  4. What lawful grounds justify refusing, restricting or deferring a request?exception
    Expected answer
    • refusal ground reference
    • affected elements
    • person-facing reason and appeal route
Artifacts
  • Subject right request case fileCase record of a right request: intake, identity verification, decision, executed changes, evidence and communication to the person.
disclosure-retention-and-auditDisclosure, retention and audit2 findings

What is released to whom in what minimal form, how long data is kept, when it may be erased, and what is logged.

minimal-disclosure-projection

Minimal disclosure projection

Each relying party receives the narrowest projection satisfying its stated need, preferring a derived predicate over the underlying attribute, with special-category data excluded by default.

Questions
  1. What is the minimum attribute set that satisfies this relying party's stated need?requirement
    Expected answer
    • requested attribute set
    • approved minimum set
    • justification for anything beyond the minimum
  2. Can the need be met by a derived predicate instead of the underlying attribute?decision
    Expected answer
    • available predicate list
    • predicate chosen
    • attribute withheld as a result
  3. Which requested attributes fall into a special category requiring a stricter condition before release?privacy
    Expected answer
    • special-category flag per attribute
    • additional lawful condition
    • approval evidence
  4. Which projection is released for statutory public-record requests, and what does it deliberately omit?access
    Expected answer
    • public-record element list
    • omitted element list
    • legal basis for the public element list
Artifacts
  • Disclosure projection definitionNamed, versioned definition of an attribute projection for a relying-party class, listing included attributes, predicates and omissions.
retention-erasure-and-audit

Retention, erasure and disclosure audit

Retention classes and periods, the tension between permanent vital records and erasure rights, the method by which deletion is demonstrated, and what every disclosure must log.

Questions
  1. How long must each class of person data be retained, and under whose mandate?retention
    Expected answer
    • retention class and period per element group
    • mandating instrument reference
    • retention start trigger
  2. Which data is subject to erasure on request and which is exempt because a legal obligation requires permanent retention?exception
    Expected answer
    • erasable element list
    • exempt element list
    • exempting legal ground
  3. What is logged for every disclosure, and for how long is the log itself retained?evidence
    Expected answer
    • log field set
    • log retention period
    • log access rights
  4. How is deletion demonstrated: physical destruction, cryptographic erasure or de-identification?validation
    Expected answer
    • deletion method code
    • verification evidence
    • residual tombstone description
Artifacts
  • Disclosure audit log entryAppend-only entry recording requester, role, purpose, lawful basis, attribute set, decision and RFC 3339 timestamp for one access.
  • Retention schedulePublished schedule mapping retention classes to periods, mandates, erasure eligibility and deletion methods.
quality-and-interoperabilityQuality and interoperability2 layers

Attribute accuracy and correction, and disciplined alignment to external vocabularies including script and transliteration handling.

attribute-qualityAttribute quality and correction1 findings

Provenance and freshness of each attribute, the correction pathway, and the quality indicators measured over the person population.

attribute-accuracy-and-correction

Attribute accuracy and correction

Every core attribute carries a source and last-verified time; corrections supersede rather than overwrite, and population-level quality is measured.

Questions
  1. What is the source and last-verified time of each core attribute?provenance
    Expected answer
    • source reference per attribute
    • last verified timestamp
    • verification method
  2. What triggers a correction, and which authority may make it in the register of record?process
    Expected answer
    • correction trigger list
    • authorised correcting role
    • required evidence and approval steps
  3. How are erroneous historical values retained for audit while no longer being presented as current?temporal
    Expected answer
    • superseded assertion retention rule
    • presentation suppression rule
    • link from current to superseded value
  4. Which quality indicators are measured over the person population and against what target?measurement
    Expected answer
    • indicator definitions (completeness, timeliness, duplication rate)
    • measured values and measurement period
    • target or threshold
Artifacts
  • Attribute correction recordRecord of a correction: prior value, corrected value, evidence, authorising role, effective date and superseded assertion link.
external-alignmentExternal alignment and encoding2 findings

Versioned mappings to external vocabularies and credential schemas, and script, encoding and transliteration handling for names.

external-schema-alignment

External schema alignment

Alignments to external vocabularies are versioned, explicitly lossy where relevant, and are mappings until conformance evidence exists.

Questions
  1. Which external vocabulary or credential schema is this projection aligned to, at which version?interoperability
    Expected answer
    • target vocabulary or schema reference
    • target version
    • mapping document reference
  2. Which parts of the alignment are lossy, and which fields have no counterpart in the target?constraint
    Expected answer
    • lossy field list with loss description
    • unmapped field list
    • compensating note or extension used
  3. Where two aligned standards conflict on the same concept, which one governs here and why?decision
    Expected answer
    • conflicting standards and concept
    • governing choice
    • recorded rationale
  4. Is this alignment a claim of conformance or only a mapping, and what evidence supports the claim?evidence
    Expected answer
    • claim type (mapping or conformance)
    • conformance evidence reference
    • test or certification result where any
Artifacts
  • Alignment mapping tableVersioned table mapping this model's elements to a target vocabulary, marking lossy and unmapped fields and recording the governing choice on conflicts.
script-and-transliteration

Script, encoding and transliteration

Names exist in native script, transliterated and machine-readable truncated forms; each form must be identified, rule-bound and reconcilable to the registered name.

Questions
  1. In which script and character encoding is each name form recorded, and which form is the registered original?interoperability
    Expected answer
    • script code and encoding per form
    • registered original form marker
    • derived form list
  2. Which transliteration rule set produced the machine-readable form, and is the transformation reversible?validation
    Expected answer
    • transliteration rule set reference and version
    • reversibility statement
    • known ambiguity cases
  3. How are truncated machine-readable forms reconciled with the full registered name?exception
    Expected answer
    • truncation indicator
    • full registered name reference
    • reconciliation procedure for matching
Artifacts
  • Transliteration mapping recordRecord linking a registered native-script name to its transliterated and machine-readable forms with the rule set applied.

Publication holds

  • Reconcile and re-pin the Core Person Vocabulary version before publication: base cites CPV 2.00 (2022-04-01), grok cites CPV 2.1.2 (2026-05-12). Properties grok relies on (Contact Point on Person, residency as Jurisdiction, the gender/sex split, GenericDate) must be confirmed against the live release actually pinned.
  • Reconcile the ISO/IEC 24760-1 edition: base cites the 2025 edition, grok cites 2019. Both retrievals were catalogue-level only, so no definition, identifier taxonomy or identity-record state vocabulary may be published as canonical from this standard.
  • Re-verify GDPR Article 9 special-category wording against the EUR-Lex OJ text; the base verified it from an unofficial reproduction (tier 3) after repeated EUR-Lex retrieval failure.
  • Re-verify CRPD Article 12 and General Comment No. 1 wording against an official UN-hosted text; one provider recorded an HTTP 403 at OHCHR and quoted secondary sources.
  • Verify every accepted source URL as live and version-pinned, including the two OASIS CIQ v3.0 URL variants, both ICAO Doc 9303 landing pages, and the UN Principles and Recommendations Rev.3 PDF whose body could not be text-extracted (paragraph-level citations are currently absent).
  • Run domain-profile validation on at least one non-EU profile before publication: the model is EU/UN-weighted (GDPR, eIDAS/EUDI PID, CPV, NIST levels), and a common-law vital-records plus ID-card regime and a Nordic population-register architecture must be mapped into the frame rather than assumed equivalent.
  • Correct the base coverage-claim counts: it states 7 bundles, 15 layers and 28 findings, but the base structure contains 14 layers; after the accepted addition the merged model is 7 bundles, 14 layers, 29 findings and 14 functions.
  • Scope the imported alternative-registration-routes finding on publication: only the UN LIA and CRVS-IdM backed portion (host-State or internationally mandated issuance, conferral by an identification authority linked to civil registration, delayed registration) may be presented as sourced; foundling, unknown-parentage and presumed-death-restoration sub-cases must be marked as unsourced operating cases, and the overlap with q-stateless-substitute must be resolved.

Deferred research

  • Dedicated minority finding: age of majority and its jurisdictional variation, emancipation, and GDPR Article 8 child-consent thresholds, plus child-specific identity protections (preservation of identity, adoption record sealing and later access) that the base flagged as a likely addition.
  • Citizenship as a legal tie to a jurisdiction versus nationality as encoded on travel documents: verify CPV and ICAO wording and decide whether the base nationality-holding finding is retitled or split, rather than adding a third overlapping node.
  • Residency and habitual residence as a jurisdiction tie distinct from the address-typed domicile pointer, including which one governs applicable law; extend declared-residence-pointer rather than duplicating the contact layer.
  • Foundlings, unknown parentage, confidential birth (including accouchement sous X), intersex civil markers, and identity restoration after a presumed or judicially declared death: no primary UN paragraph was located by either provider.
  • Cross-border recognition of foreign civil status, foreign gender recognition and foreign capacity decisions, including the Hague Convention on the international protection of adults and apostille legalisation of civil documents, which neither provider fetched.
  • Digital-identity assurance beyond the sources used: World Bank ID4D practice, and reconciliation of NIST SP 800-63A-4 assurance levels with eIDAS levels of assurance, which are not one-to-one mappable.
  • Biometric modality profiles (ISO/IEC 19794 and 39794) and the template-protection, retention and matching-threshold rules that follow; both providers reference biometrics only as pointers and neither found an authoritative matching threshold for cross-script name matching.
  • Deceased-person data handling after death and posthumous personality or digital remains, where most data-protection regimes stop applying while permanent registry obligations continue.