{
  "version": "1.0.0",
  "lastReviewed": "2026-06-08",
  "status": "private-evidence-workflow-ready",
  "purpose": "Public-safe contract for the private privacy/consent readiness gate before paid traffic, retargeting, broad personal-data processing, or commercial outreach.",
  "publicSafe": true,
  "rawClientDataAllowed": false,
  "secretValuesAllowed": false,
  "notificationPayloadStorage": false,
  "command": "npm.cmd run check:privacy-consent",
  "strictCommand": "npm.cmd run check:privacy-consent -- --strict",
  "privateRegister": "tmp/privacy-consent-readiness/privacy-consent-readiness-register.json",
  "privateRegisterTemplate": "tmp/privacy-consent-readiness/privacy-consent-readiness-register.template.json",
  "privateWorkbench": "tmp/privacy-consent-readiness/privacy-consent-readiness-workbench.md",
  "privateEvidenceHandoff": "tmp/privacy-consent-readiness/privacy-consent-evidence-handoff.md",
  "output": "tmp/privacy-consent-readiness/latest.json",
  "requiredPrivacyConsentEvidenceStatus": "privacyConsentEvidence.ready=true",
  "requiredReviewedCurrentStateDigest": "evidenceHandoffReview.evidenceRefDetails.reviewedStateDigest",
  "privacyConsentEvidencePolicy": {
    "version": "1.0.0",
    "readyField": "privacyConsentEvidence.ready",
    "statusRequired": "pass",
    "requiresLegalApprovalEvidenceReady": true,
    "requiresNotificationDeliveryEvidenceReadyForChannelRouting": true,
    "requiresEveryChecklistItemApproved": true,
    "requiresSafeReviewerId": true,
    "requiresReviewedAtDate": true,
    "requiresSafeEvidenceRef": true,
    "requiresPrivateEvidenceHash": "sha256:<64 lowercase hex chars>",
    "requiresEvidenceRefDetails": true,
    "requiresReviewedPublicArtifacts": true,
    "requiresEvidenceHandoffReview": true,
    "requiredEvidenceHandoffSignal": "privacy/consent evidence handoff reviewed",
    "privateEvidenceHandoff": "tmp/privacy-consent-readiness/privacy-consent-evidence-handoff.md",
    "requiresReviewedCurrentStateDigest": true,
    "requiredReviewedStateDigestField": "evidenceHandoffReview.evidenceRefDetails.reviewedStateDigest",
    "requiredReviewedStateDigestMustEqual": "tmp/privacy-consent-readiness/latest.json summary.currentPrivacyConsentStateDigest",
    "requiredChecklistItems": [
      "operator-requisites-binding",
      "consent-version-binding",
      "split-purpose-consent",
      "retention-deletion-route",
      "subject-rights-withdrawal",
      "channel-provider-boundary",
      "stop-list-audit-preflight",
      "analytics-retargeting-boundary",
      "access-export-control"
    ],
    "requiredApprovedScopes": [
      "publicPolicyPublication",
      "crmLeadIntake",
      "commercialOutreach",
      "thirdPartyMessengers",
      "notificationRouting",
      "retargetingPixels",
      "paidTraffic",
      "broadPersonalDataProcessing"
    ],
    "requiredTechnicalArtifacts": [
      "/legal-review-dossier.json",
      "/legal/lawyer-review-pack.json",
      "/crm/lead-schema.json",
      "/crm/outreach-policy.json",
      "/analytics-event-plan.json",
      "/crm/production-storage-contract.json",
      "/crm/rbac-policy.json"
    ],
    "requiresAllItemChecksTrue": true,
    "unresolvedConditionsBlockApproval": true,
    "requiresNoRawClientData": true,
    "requiresNoSampleClientData": true,
    "requiresNoSecrets": true,
    "requiresNoNotificationPayloads": true,
    "publicArtifact": false,
    "rawClientDataAllowed": false,
    "secretValuesAllowed": false,
    "notificationPayloadStorage": false
  },
  "launchGate": {
    "paidTraffic": {
      "status": "blocked",
      "requiredEvidence": [
        "tmp/legal-review/latest.json legalApprovalEvidence.ready=true",
        "tmp/notification-readiness/latest.json deliveryEvidence.ready=true",
        "privacy/consent evidence handoff reviewed",
        "evidenceHandoffReview.evidenceRefDetails.reviewedStateDigest matches summary.currentPrivacyConsentStateDigest",
        "tmp/privacy-consent-readiness/latest.json privacyConsentEvidence.ready=true"
      ]
    },
    "broadPersonalDataProcessing": {
      "status": "blocked",
      "requiredEvidence": [
        "tmp/legal-review/latest.json legalApprovalEvidence.ready=true",
        "tmp/notification-readiness/latest.json deliveryEvidence.ready=true",
        "privacy/consent evidence handoff reviewed",
        "evidenceHandoffReview.evidenceRefDetails.reviewedStateDigest matches summary.currentPrivacyConsentStateDigest",
        "tmp/privacy-consent-readiness/latest.json privacyConsentEvidence.ready=true"
      ]
    },
    "retargetingPixels": {
      "status": "blocked",
      "requiredEvidence": [
        "approved tracking consent",
        "approved platform configuration",
        "tmp/privacy-consent-readiness/latest.json privacyConsentEvidence.ready=true"
      ]
    },
    "commercialOutreach": {
      "status": "blocked",
      "requiredEvidence": [
        "approved advertising consent",
        "approved channel provider boundary",
        "tmp/privacy-consent-readiness/latest.json privacyConsentEvidence.ready=true"
      ]
    }
  },
  "privateEvidenceRules": [
    "Use private review note refs or sha256 hashes only.",
    "Do not store raw client data, sample client payloads, notification payloads, private legal notes, webhook URLs, tokens, or secrets.",
    "Every approved item needs reviewer id, reviewedAt, safe evidenceRef, evidenceRefDetails, reviewed public artifacts, approved scopes, and all checks true."
  ]
}