Graph system G34 Realm V, volume 35 of 42
Permissions, consent, and disclosure graph
Who may access, use, export, or publish each record?
Researched designNot deployed
Question§
Who may access, use, export, or publish each record?
Nodes§
Resource; Person/role; Permission; Prohibition; Purpose; Disclosure decision
Relationship sketch§
- policy → resource
- permission → permitted action
- derived artifact → inherited restrictions
Evidence inputs§
Actual authorization, rights statements, owner approved disclosure decisions, retention requirements.
Implementation§
Enforce access in the real storage/retrieval layer; graph labels describe policy but do not enforce it. Review derived summaries for private source leakage and track revocation through outputs.
Acceptance checks§
- Unauthorized retrieval/export test is denied by real controls
- Private evidence is excluded from public examples
- Revocation identifies dependent outputs
Do not infer§
A consent field or ODRL record alone is not legal compliance or effective access control.
Publication boundary§
Policy summaries may be public; sensitive access records private.
Source basis§
S42, S14. See Research/sources.json. Sources support the primitives or named technology. The organization, labels, actions, and acceptance contracts in this catalog are this library's design, not claimed provider requirements.