Reduced visual mode. The complete interface stylesheet did not apply. The content remains available; the site operator should run the asset-delivery preflight.

R47 · Human standing recovery

Carry the correction, not the stigma.

A person may prove the narrow correction needed for one decision without exposing the original allegation, becoming linkable across institutions, or carrying a universal certificate of innocence.

  1. 01 · WarningDo not turn prediction into identity.Identify the machine-judgment danger.
  2. 02 · ContestabilityExpose evidence, inference, rule, and owner.Reconstruct the decision path.
  3. 03 · RemedyMake the invalid result stop acting.Execute correction everywhere it traveled.
  4. 04 · Non-RecurrenceVerify that the result cannot quietly return.Stress-test caches, exports, models, and downstream systems.
  5. 05 · Standing RecoveryProve only the correction a new decision needs.Bind disclosure to one recipient and purpose.

Six bounded demonstrations

Choose a recovery situation.

All six receipts are synthetic and fictional. They describe no real person, institution, allegation, credential, or event. Different outcomes—including partial federation, recipient refusal, revocation, and expiry—remain visibly distinct.

SRP-R47-006Expired Without Use

Civic Service · Fictional receipt

Unused civic-service correction expires without penalty

A withdrawn predictive label cannot be used in one volunteer-placement review.

Affected person lensWhat narrow correction can I present, what stays private, and what happens if I decline?
Recipient
Fictional Riverward Volunteer Office
Purpose
Offer a bounded correction for one volunteer-placement review
Expires
2026-08-31T15:40:00Z
Human owner
Fictional Civic Service Standing Recovery Officer
Replay limit
1 use
Original stigma shown?
No

What authorizes recovery?

Correction lineage

The portable claim is not a free-standing character certificate. It is anchored to the exact contest, remedy, and independent non-recurrence records that precede it.

R44 · ContestabilityCTR-R44-006
R45 · RemedyRMR-R45-006
R46 · Non-RecurrenceNRV-R46-006
R47 · Narrow presentationSRP-R47-006

What may the recipient rely on?

A correction, not an identity.

Bounded recovery claim

A withdrawn predictive label cannot be used in one volunteer-placement review.

Subject reference: pairwise:a8e9cb7bf2f5847346eb6600

What this does not establish

  • General character
  • Future conduct
  • Cross-context eligibility
  • A permanent innocence or clearance status

Where is use allowed?

Five bindings prevent a correction from becoming a roaming credential.

RecipientFictional Riverward Volunteer Office
PurposeOffer a bounded correction for one volunteer-placement review
Validity2026-08-30T15:40:00Z
to
2026-08-31T15:40:00Z
ReplayOne use. No cross-recipient replay.
RevocationHuman-owned and immediately checkable.

What crosses the boundary?

Selective disclosure

The recipient receives the minimum correction facts necessary for the named decision. The original stigma and unrelated evidence stay out of the presentation.

Disclosed

  • The predictive label is withdrawn
  • The presentation expires automatically
  • Non-presentation cannot be treated as adverse evidence

Withheld

  • The withdrawn label text
  • Prior scoring features
  • Other volunteer activity
  • Any durable person-level clearance token

Can a person decline?

Refusal cannot become evidence against the person.

Voluntary presentationThe person may decline this presentation and use an equivalent human review path.
Non-retaliationThe recipient may not infer guilt, risk, dishonesty, or ineligibility from non-presentation.

Accountable owner

Fictional standing-recovery ombudsperson · Purpose-bound human review request

How far did recovery travel?

Federated result: Expired

Coverage is limited to the explicitly named participants and purpose.

Riverward intakePresentation Not Opened

May retain: presentation_receipt_hash, purpose_binding, expiry. Must not retain: original_stigma, cross_context_person_identifier, undisclosed_evidence.

Riverward privacy officerExpiration Acknowledged

May retain: presentation_receipt_hash, purpose_binding, expiry. Must not retain: original_stigma, cross_context_person_identifier, undisclosed_evidence.

Can presentations be joined into a dossier?

Anti-linkability checks

Required protections

  • Pairwise recipient reference
  • No stable cross-context identifier
  • No global cleared-person registry
  • No cross-recipient replay
  • No correlation by receipt hash or ID

Checked surfaces

  • Visible fields and URLs
  • Hashes, timestamps, and filenames
  • Accessibility labels and metadata
  • Print output and structured data
  • CSS classes and HTML attributes

What remains unresolved?

Limits remain part of the receipt.

  • Expiration is not acceptance
  • The office must use its ordinary human review path
  • No retained presentation may influence later placement

Can the claim be inspected?

Machine-readable record and integrity

These fictional demonstrations expose their contract, state model, presentation rules, predecessor lineage, and deterministic hashes. Technical material is available without dominating the affected person’s reading path.

Integrity hashes
Input SHA-256
d732068d2e9edbdbc1b3565d12432c29902152521d4a30fc1f3567c4cda24d43
Output SHA-256
d0b7c30fbe6fa5b4137f0746dfcd769f709e312e1fa753ff771a25da94d89f3e
Receipt SHA-256
0ea6f7a266463d75f0b0feba7c966287c23ae0036cad283b5ea4c88e626fc203
Complete fictional receipt
{
    "accountability": {
        "audit_owner": "Fictional independent portability auditor",
        "human_owner": "Fictional Civic Service Standing Recovery Officer",
        "issuer": "Fictional Antichrist.cx Accountability Laboratory",
        "recipient_owner": "Fictional Riverward Volunteer Office human review lead"
    },
    "anti_linkability": {
        "accessibility_labels_contain_subject_identifier": false,
        "correlation_by_hash_prohibited": true,
        "correlation_by_receipt_id_prohibited": true,
        "correlation_by_timestamp_reduced": true,
        "css_or_dom_contains_subject_identifier": false,
        "global_subject_registry": false,
        "pairwise_recipient_reference": true,
        "print_output_contains_hidden_subject_identifier": false,
        "public_url_contains_subject_identifier": false,
        "stable_cross_context_identifier": false,
        "structured_data_contains_subject_identifier": false
    },
    "domain": "civic_service",
    "federation": {
        "coverage_statement": "Coverage is limited to the explicitly named participants and purpose.",
        "participants": [
            {
                "acknowledged_at": null,
                "may_retain": [
                    "presentation_receipt_hash",
                    "purpose_binding",
                    "expiry"
                ],
                "must_not_retain": [
                    "original_stigma",
                    "cross_context_person_identifier",
                    "undisclosed_evidence"
                ],
                "name": "Riverward intake",
                "participant_id": "SRP-R47-006-FED-01",
                "state": "presentation_not_opened"
            },
            {
                "acknowledged_at": "2026-08-30T15:40:00Z",
                "may_retain": [
                    "presentation_receipt_hash",
                    "purpose_binding",
                    "expiry"
                ],
                "must_not_retain": [
                    "original_stigma",
                    "cross_context_person_identifier",
                    "undisclosed_evidence"
                ],
                "name": "Riverward privacy officer",
                "participant_id": "SRP-R47-006-FED-02",
                "state": "expiration_acknowledged"
            }
        ],
        "status": "expired",
        "unrepresented_as_complete": false
    },
    "fictional": true,
    "fictional_notice": "Synthetic accountable-design demonstration. No real person, institution, allegation, credential, or event is represented.",
    "integrity": {
        "input_sha256": "d732068d2e9edbdbc1b3565d12432c29902152521d4a30fc1f3567c4cda24d43",
        "output_sha256": "d0b7c30fbe6fa5b4137f0746dfcd769f709e312e1fa753ff771a25da94d89f3e",
        "receipt_sha256": "0ea6f7a266463d75f0b0feba7c966287c23ae0036cad283b5ea4c88e626fc203"
    },
    "limits": [
        "Expiration is not acceptance",
        "The office must use its ordinary human review path",
        "No retained presentation may influence later placement"
    ],
    "lineage": {
        "contestability": {
            "receipt_id": "CTR-R44-006",
            "receipt_sha256": "ef4586be41cee844c35b6e2350e7f38c469c7d9132eb84f7090090f82bc64f77"
        },
        "lineage_complete": true,
        "non_recurrence": {
            "receipt_id": "NRV-R46-006",
            "receipt_sha256": "62df463c9c13faee07da24d2debf2ea089ccf255088262341283bd691945ad8c"
        },
        "remedy": {
            "receipt_id": "RMR-R45-006",
            "receipt_sha256": "160e42bd3f22d86f85af879bf8d5b0a4cc7831421b57960cef3cb728cb1ac6e3"
        }
    },
    "presentation": {
        "audience_binding_sha256": "38386035023f85c00a20cb1ddbcaca552c28a5ba17a707fe9171b2e35b1a2cd2",
        "cross_recipient_replay_permitted": false,
        "expires_at": "2026-08-31T15:40:00Z",
        "issued_at": "2026-08-30T15:40:00Z",
        "one_time": true,
        "presentation_id": "PRS-EC8A3D66E987AE0972E7",
        "presentation_status": "expired_without_use",
        "purpose": "Offer a bounded correction for one volunteer-placement review",
        "recipient": "Fictional Riverward Volunteer Office",
        "replay_limit": 1,
        "revocable": true,
        "revocation_reference": "/standing-recovery/receipt?id=SRP-R47-006"
    },
    "receipt_id": "SRP-R47-006",
    "recovery_claim": {
        "claim_type": "narrow_correction",
        "disclosed_facts": [
            "The predictive label is withdrawn",
            "The presentation expires automatically",
            "Non-presentation cannot be treated as adverse evidence"
        ],
        "does_not_establish": [
            "General character",
            "Future conduct",
            "Cross-context eligibility",
            "A permanent innocence or clearance status"
        ],
        "plain_language": "A withdrawn predictive label cannot be used in one volunteer-placement review.",
        "subject_reference": "pairwise:a8e9cb7bf2f5847346eb6600",
        "universal_person_identifier": null,
        "withheld_facts": [
            "The withdrawn label text",
            "Prior scoring features",
            "Other volunteer activity",
            "Any durable person-level clearance token"
        ]
    },
    "refusal_and_non_retaliation": {
        "adverse_inference_from_refusal_prohibited": true,
        "complaint_channel": "Purpose-bound human review request",
        "equivalent_human_review_available": true,
        "presentation_voluntary": true,
        "refusal_permitted": true,
        "retaliation_owner": "Fictional standing-recovery ombudsperson"
    },
    "release": "R47",
    "role_views": {
        "affected_person": {
            "priority_fields": [
                "recovery_claim",
                "presentation",
                "refusal_and_non_retaliation",
                "federation"
            ],
            "question": "What narrow correction can I present, what stays private, and what happens if I decline?"
        },
        "auditor": {
            "priority_fields": [
                "anti_linkability",
                "refusal_and_non_retaliation",
                "federation",
                "integrity"
            ],
            "question": "Can recipients correlate presentations, retaliate for refusal, or overstate federation coverage?"
        },
        "issuer": {
            "priority_fields": [
                "lineage",
                "selective_disclosure",
                "anti_linkability",
                "accountability"
            ],
            "question": "How do I issue a useful correction without creating a portable identity score?"
        },
        "recipient": {
            "priority_fields": [
                "presentation",
                "recovery_claim",
                "limits",
                "revocation"
            ],
            "question": "What may I rely on, for which purpose, until when, and what must I not infer?"
        }
    },
    "schema": "antichrist.cx.standing-recovery-portability-receipt.v1",
    "selective_disclosure": {
        "disclosed_fields": [
            "receipt_id",
            "status",
            "recovery_claim.plain_language",
            "presentation.recipient",
            "presentation.purpose",
            "presentation.expires_at",
            "accountability.human_owner"
        ],
        "minimum_necessary": true,
        "original_stigma_disclosed": false,
        "private_evidence_disclosed": false,
        "withheld_fields": [
            "recovery_claim.withheld_facts",
            "lineage source payloads",
            "private evidence",
            "cross-context identifiers"
        ]
    },
    "status": "expired_without_use",
    "title": "Unused civic-service correction expires without penalty"
}
Public design limits

This interface demonstrates an accountable design boundary. It is not legal advice, an identity system, a production credential, proof that a real institution uses these practices, or evidence that selective disclosure alone resolves every power imbalance.