---
title: Permissions, consent, and disclosure graph
code: G34
shelf: Graph systems
url: https://library.feedthejoe.com/graph-systems/g34-permissions-consent-and-disclosure-graph/
markdown: https://library.feedthejoe.com/graph-systems/g34-permissions-consent-and-disclosure-graph.md
author: Joseph W. Anady
publisher: THATDEVELOPERGUY LLC
status: "Researched: Not deployed"
summary: Who may access, use, export, or publish each record?
published: 2026-09-12
reviewed: 2026-09-12
modified: 2026-10-14
release: 2026.09.12-g40
edition: 2026.09.12-g40
words: 151
sources:
  - graph:S42
  - graph:S14
cites:
  - https://library.feedthejoe.com/graph-systems/primary-source-register/
rights: © 2026 THATDEVELOPERGUY LLC. All rights reserved.
---

# G34 Permissions, consent, and disclosure graph

## Question

Who may access, use, export, or publish each record?

## Nodes

Resource; Person/role; Permission; Prohibition; Purpose; Disclosure decision

## Relationship sketch

* policy → resource
* permission → permitted action
* derived artifact → inherited restrictions

## Evidence inputs

Actual authorization, rights statements, owner approved disclosure decisions, retention requirements.

## Implementation

Enforce access in the real storage/retrieval layer; graph labels describe policy but do not enforce it. Review derived summaries for private source leakage and track revocation through outputs.

## Acceptance checks

* Unauthorized retrieval/export test is denied by real controls
* Private evidence is excluded from public examples
* Revocation identifies dependent outputs

## Do not infer

A consent field or ODRL record alone is not legal compliance or effective access control.

## Publication boundary

Policy summaries may be public; sensitive access records private.

## Source basis

[S42](https://library.feedthejoe.com/graph-systems/primary-source-register/#S42), [S14](https://library.feedthejoe.com/graph-systems/primary-source-register/#S14). See Research/sources.json. Sources support the primitives or named technology. The organization, labels, actions, and acceptance contracts in this catalog are this library's design, not claimed provider requirements.
