{
  "schema_version":"0.2","status":"implemented-chatgpt-authentication-with-staged-role-review","reviewed_on":"2026-09-17","purpose":"Define and enforce least-privilege identity boundaries for public reading, authenticated pre-moderated participation, and server-assigned owner moderation.",
  "identity_principles":["collect the minimum identity needed for the role","allow public display names distinct from verified account identity","never expose account recovery data","never infer scientific authority from identity or credential","require explicit elevation and expiry for privileged roles"],
  "roles":[
    {"id":"reader","may":["read public discussion","export public records"],"may_not":["post","review","moderate","alter evidence"]},
    {"id":"participant","may":["create own discussion drafts","submit own posts for moderation","edit own unreviewed drafts","export own records"],"may_not":["publish directly","review own evidence","moderate","alter another record"]},
    {"id":"reviewer","may":["classify research relevance","request evidence clarification","record a named recommendation"],"may_not":["moderate people","erase dissent","modify source evidence","approve own work"]},
    {"id":"moderator","may":["apply published conduct rules","limit visibility pending review","record an incident decision"],"may_not":["validate scientific claims","modify evidence","silently delete dissent","decide own appeal"]},
    {"id":"steward","may":["approve policy changes","appoint time-limited roles","hear escalated process issues"],"may_not":["rewrite evidence","bypass appeal","grant permanent privilege","hide conflicts"]},
    {"id":"administrator","may":["maintain access and system availability","execute reviewed recovery procedures"],"may_not":["make scientific decisions by technical access","read restricted content without logged purpose","change policy unilaterally"]}
  ],
  "required_controls":["account recovery review","role expiry","separation of duties","conflict disclosure","privilege audit","session revocation","pseudonym policy","identity export and correction"],
  "platform_gate":{"state":"bounded_active","implemented":["ChatGPT sign-in for writes","stable Site-scoped user identifier","public name chosen separately from account email","server-controlled moderator assignment","adult self-attestation"],"staged":["institution verification","age verification beyond attestation","role expiry automation","independent privilege audit"]},
  "evolution_hooks":["platform.access.changed","identity.provider.changed","forum.role.changed","privacy.expectation.changed","feature.deprecated"]
}