{
    "must": [
        "observe institutional mechanisms rather than permanently tracking people",
        "use synthetic and non-personal canaries where possible",
        "minimize affected-person data",
        "record authority, access limits, conflicts, funding boundary, and revocation risk",
        "name every unobserved surface",
        "distinguish absence of evidence from evidence of absence",
        "preserve a confidential contest route"
    ],
    "must_not": [
        "publish a list of affected people",
        "publish person-level allegations, scores, cluster memberships, or raw case files",
        "authorize individual adverse action",
        "create a reusable cohort identity or public blacklist",
        "call an unobserved surface safe"
    ],
    "release": "R50",
    "schema": "antichrist.cx.public-interest-oversight-boundary.v1"
}