{
  "schema_version":"0.4","status":"implemented-minimized-durable-forum-storage-retention-review-staged","reviewed_on":"2026-09-17","purpose":"Govern public forum records, private participant profiles and following, restricted moderation records, author withdrawal, and staged retention and archival controls.",
  "data_classes":[
    {"id":"public_record","examples":["published display name","public post","public moderation outcome"],"default_audience":"public","retention":"while scientifically or procedurally relevant, with periodic review"},
    {"id":"restricted_record","examples":["draft","appeal evidence","incident report","moderation working record"],"default_audience":"named authorized roles","retention":"purpose-limited with a declared expiry"},
    {"id":"account_security","examples":["recovery metadata","session records","privilege audit"],"default_audience":"security administrators with logged purpose","retention":"minimum needed for recovery, security, and audit"},
    {"id":"prohibited_collection","examples":["unnecessary government identifiers","unnecessary precise location","unnecessary health data","private contacts without consent"],"default_audience":"none","retention":"do not collect"}
  ],
  "required_controls":["data minimization","audience label on every record","purpose and consent notice","participant export","correction path","redaction without silent source rewrite","incident notification","retention schedule","deletion or de-identification review","legal hold authority and expiry","archive handoff","obsolete-format migration","backup expiry verification"],
  "deletion_boundaries":["a participant may request removal of unnecessary personal data","scientific provenance may require a de-identified tombstone rather than silent disappearance","legal or safety holds must be named scoped and time-limited","deletion must propagate to backups under the published schedule"],
  "storage_gate":{"state":"bounded_active","implemented":["D1 thread reply report and moderation-event records","D1 profile following and link-decision records","device-local unsubmitted drafts","no stored participant email in forum profile topic reply follow or link records","no public serialization of stable account identifiers or internal moderation notes","account-scoped participant status and profile view","personal-information rejection and centralized link screening","thread and reply withdrawal","public thread export"],"staged":["participant-wide account export","automated retention review","backup expiry evidence","legal hold authority","archive handoff","independent privacy and legal review"]},
  "evolution_hooks":["storage.schema.changed","privacy.expectation.changed","retention.schedule.changed","legal.requirement.changed","archive.format.changed","platform.access.changed"]
}