code/cl8y-wallet-security
Watch
4
0
Fork
You've already forked cl8y-wallet-security
 0
Code Issues 6 Pull requests 1 Projects Releases Packages 3 Wiki Activity

Private recovery case evidence, independent adjudication and appeal workflow #6

New issue
Open
opened 2026-10-31 02:07:39 +00:00 by PlasticDigits · 1 comment
PlasticDigits commented 2026-10-31 02:07:39 +00:00
Owner

Research follow-up from code/cw20-mintable #8 / epic #3. Extends portal #1/#2 with a private case service, not wallet login/assignment or on-chain execution. Implement the report's entitlement rubric: identity, current key control, historic entitlement and consent are separate. Social accounts and newly supplied KYC cannot authorize recovery.

Acceptance:

  • Case-bound private submissions and reviewer access/audit; no raw PII in public APIs, chain, logs, notifications or Git. Salted manifest commitments; explicit deletion/backup-expiry policy and minimal verifier attestations.
  • Normal route verifies matured independent recovery linkage, second independent entitlement source and exact destination acceptance; accessible manual/no-ID exception route and optional identity/liveness verification.
  • Separate decision and appeal reviewers, recusal/constituent-key independence, legitimate sale/coercion/colluding guardian scenarios and conflicting claims; reasoned redacted outcomes.
  • Source-key/social objections cannot release reservations, change recipient or reset timers. Dedup repeated claims; new substantive evidence gets review. Independent veto/cancellation roles reflect final #6 ABI; no portal chain authority.
  • Seven-day triage/fourteen-day appeal response targets with reasoned extensions and no automatic asset award/release. Evidence of access denial/deletion and representative case review before acceptance.

Dependencies: existing portal #1/#2 and cw20 #6. This issue remains open for implementation; research publication is not deployment.

Research follow-up from code/cw20-mintable #8 / epic #3. Extends portal #1/#2 with a private case service, not wallet login/assignment or on-chain execution. Implement the report's entitlement rubric: identity, current key control, historic entitlement and consent are separate. Social accounts and newly supplied KYC cannot authorize recovery. Acceptance: - Case-bound private submissions and reviewer access/audit; no raw PII in public APIs, chain, logs, notifications or Git. Salted manifest commitments; explicit deletion/backup-expiry policy and minimal verifier attestations. - Normal route verifies matured independent recovery linkage, second independent entitlement source and exact destination acceptance; accessible manual/no-ID exception route and optional identity/liveness verification. - Separate decision and appeal reviewers, recusal/constituent-key independence, legitimate sale/coercion/colluding guardian scenarios and conflicting claims; reasoned redacted outcomes. - Source-key/social objections cannot release reservations, change recipient or reset timers. Dedup repeated claims; new substantive evidence gets review. Independent veto/cancellation roles reflect final #6 ABI; no portal chain authority. - Seven-day triage/fourteen-day appeal response targets with reasoned extensions and no automatic asset award/release. Evidence of access denial/deletion and representative case review before acceptance. Dependencies: existing portal #1/#2 and cw20 #6. This issue remains open for implementation; research publication is not deployment.
PlasticDigits commented 2026-10-31 02:09:11 +00:00
Author
Owner

Independent research review clarification for acceptance: deleting ID/live media within seven days must preserve a reviewable minimal signed verifier attestation/provenance for independent appeals. If insufficient, use fresh independent proofing or a narrowly justified, notified preservation exception with deletion date. Allow at least fourteen days to appeal a delivered reasoned decision, and wait for both that window and the full >=30-day chain contest before execution, with no unresolved substantive case. For retention, no-appeal final resolution means documented closure after windows and execution/cancellation disposition; with appeal it means final independent appeal decision and disposition. Service response targets never auto-release assets.

Independent research review clarification for acceptance: deleting ID/live media within seven days must preserve a reviewable minimal signed verifier attestation/provenance for independent appeals. If insufficient, use fresh independent proofing or a narrowly justified, notified preservation exception with deletion date. Allow at least fourteen days to appeal a delivered reasoned decision, and wait for both that window and the full >=30-day chain contest before execution, with no unresolved substantive case. For retention, no-appeal final resolution means documented closure after windows and execution/cancellation disposition; with appeal it means final independent appeal decision and disposition. Service response targets never auto-release assets.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
ops/shared-ops-telegram
ops/offhost-continuation-native-20261101
bb/portal-coolify-isolated-deployment-and-receipts-thr_tj2burwn8b
ops/provider-runtime-release
ops/offhost-backup-proof-20261101
bb/portal-mail-gateway-thr_ywz2dcyd3p
renovate/configure
ops/sealer-runtime-evidence
ops/isolated-backup-sealer
ops/portal-key-and-wallet-evidence
bb/portal-typescript-ui-and-wallet-signing-thr_yc2yevrgcw
bb/portal-notification-provider-enrollment-and-acti-thr_ywz2dcyd3p
ops/portal-runtime-receipts
bb/wallet-security-portal-rust-typescript-postgresq-thr_wur9hgwhec
portal-runtime-hook-b8aa303
portal-profile-launch-e44569e
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
PlasticDigits
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
code/cl8y-wallet-security#6
No description provided.