{ "schema": "cognitiveliberties.private-inquiry-publication-packet-builder.v1", "id": "NAV-CL-E003", "release": "1.19.0", "as_of": "2026-09-04", "route": "/protect-private-inquiry#publication-packet-builder", "pathway_id": "NAV-CL-P001", "pathway_step_id": "NAV-CL-P001-S05", "register_id": "NAV-CL-E001", "register_release": "1.19.0", "validator_id": "NAV-CL-E002", "validator_release": "1.19.0", "audit_protocol_id": "AUDIT-CL-001", "title": "Local Private-Inquiry Publication-Packet Builder", "summary": "A user-initiated, browser-local and command-line deterministic builder that packages only allowlisted, metadata-minimized derivatives of a NAV-CL-E002 validation report and an optional separately selected NAV-CL-E001 register. It never uploads, stores, signs, certifies, or independently verifies the selected content.", "accepted_validation_report_schema": "cognitiveliberties.local-evidence-validation-result.v1", "accepted_register_schema": "cognitiveliberties.private-inquiry-evidence-register-template.v1", "profiles": [ { "id": "NAV-CL-E003-P01", "key": "safe", "label": "Safe minimized profile", "default": true, "included_field_classes": [ "public_by_default" ], "description": "Exports only controlled IDs, statuses, dates, version references, and lifecycle links after inert-content screening. No optional free-text evidence values are exported." }, { "id": "NAV-CL-E003-P02", "key": "advanced", "label": "Advanced human-review profile", "default": false, "included_field_classes": [ "public_by_default", "optional_after_human_review" ], "description": "After explicit selection, also permits optional contextual fields that pass active-content and sensitive-pattern screening. Excluded-by-default fields and source originals remain omitted." } ], "field_classifications": [ "public_by_default", "optional_after_human_review", "excluded_by_default" ], "field_policy": [ { "id": "NAV-CL-E003-F001", "register_field": "record_id", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F002", "register_field": "register_id", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F003", "register_field": "evidence_area_id", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F004", "register_field": "control_or_claim", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F005", "register_field": "evidence_status", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F006", "register_field": "evidence_tier_ids", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F007", "register_field": "audit_domain_ids", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F008", "register_field": "kit_ids", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F009", "register_field": "evidence_locator", "classification": "excluded_by_default", "reason": "Locator, custodian, account-state, confidential-basis, or receipt fields are omitted from every supported profile because they have elevated disclosure, identity, or internal-path risk." }, { "id": "NAV-CL-E003-F010", "register_field": "public_summary_locator", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F011", "register_field": "provenance_source", "classification": "excluded_by_default", "reason": "Locator, custodian, account-state, confidential-basis, or receipt fields are omitted from every supported profile because they have elevated disclosure, identity, or internal-path risk." }, { "id": "NAV-CL-E003-F012", "register_field": "provenance_custodian", "classification": "excluded_by_default", "reason": "Locator, custodian, account-state, confidential-basis, or receipt fields are omitted from every supported profile because they have elevated disclosure, identity, or internal-path risk." }, { "id": "NAV-CL-E003-F013", "register_field": "collected_on", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F014", "register_field": "integrity_reference", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F015", "register_field": "system_or_process", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F016", "register_field": "product_or_model_version", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F017", "register_field": "build_or_release", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F018", "register_field": "configuration_scope", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F019", "register_field": "deployment_region_or_context", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F020", "register_field": "test_account_state", "classification": "excluded_by_default", "reason": "Locator, custodian, account-state, confidential-basis, or receipt fields are omitted from every supported profile because they have elevated disclosure, identity, or internal-path risk." }, { "id": "NAV-CL-E003-F021", "register_field": "test_date", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F022", "register_field": "data_flow_scope", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F023", "register_field": "retention_scope", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F024", "register_field": "policy_or_authority_title", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F025", "register_field": "policy_or_authority_locator", "classification": "excluded_by_default", "reason": "Locator, custodian, account-state, confidential-basis, or receipt fields are omitted from every supported profile because they have elevated disclosure, identity, or internal-path risk." }, { "id": "NAV-CL-E003-F026", "register_field": "approving_body_or_role", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F027", "register_field": "approval_date", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F028", "register_field": "effective_date", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F029", "register_field": "authority_scope", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F030", "register_field": "vendor_clause_scope", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F031", "register_field": "emergency_exception_scope", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F032", "register_field": "sunset_or_expiry", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F033", "register_field": "data_or_inference_class", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F034", "register_field": "deletion_rule", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F035", "register_field": "deletion_method", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F036", "register_field": "deletion_completed_on", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F037", "register_field": "deletion_verification_method", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F038", "register_field": "downstream_deletion_status", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F039", "register_field": "deletion_receipt_or_log", "classification": "excluded_by_default", "reason": "Locator, custodian, account-state, confidential-basis, or receipt fields are omitted from every supported profile because they have elevated disclosure, identity, or internal-path risk." }, { "id": "NAV-CL-E003-F040", "register_field": "exceptions_or_holds", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F041", "register_field": "finding_or_issue_id", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F042", "register_field": "remediation_owner_role", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F043", "register_field": "remediation_action", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F044", "register_field": "priority_or_gate", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F045", "register_field": "due_date", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F046", "register_field": "retest_method", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F047", "register_field": "retest_date", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F048", "register_field": "challenge_or_appeal_state", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F049", "register_field": "closure_evidence_locator", "classification": "excluded_by_default", "reason": "Locator, custodian, account-state, confidential-basis, or receipt fields are omitted from every supported profile because they have elevated disclosure, identity, or internal-path risk." }, { "id": "NAV-CL-E003-F050", "register_field": "residual_risk", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F051", "register_field": "incident_trigger", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F052", "register_field": "trigger_threshold", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F053", "register_field": "observed_on", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F054", "register_field": "incident_owner_role", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F055", "register_field": "containment_action", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F056", "register_field": "affected_evidence_area_ids", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F057", "register_field": "notification_or_notice_duty", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F058", "register_field": "reaudit_scope", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F059", "register_field": "incident_record_locator", "classification": "excluded_by_default", "reason": "Locator, custodian, account-state, confidential-basis, or receipt fields are omitted from every supported profile because they have elevated disclosure, identity, or internal-path risk." }, { "id": "NAV-CL-E003-F060", "register_field": "last_reviewed_on", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F061", "register_field": "next_review_date", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F062", "register_field": "review_cadence", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F063", "register_field": "material_change_triggers", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F064", "register_field": "lifecycle_assumptions", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F065", "register_field": "monitoring_owner_role", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F066", "register_field": "supersedes_record_id", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F067", "register_field": "superseded_by_record_id", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." }, { "id": "NAV-CL-E003-F068", "register_field": "review_outcome", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F069", "register_field": "confidentiality_basis", "classification": "excluded_by_default", "reason": "Locator, custodian, account-state, confidential-basis, or receipt fields are omitted from every supported profile because they have elevated disclosure, identity, or internal-path risk." }, { "id": "NAV-CL-E003-F070", "register_field": "known_unknowns", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F071", "register_field": "unavailable_evidence", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F072", "register_field": "critical_gate_failures", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F073", "register_field": "limitations", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F074", "register_field": "prepared_by_role", "classification": "optional_after_human_review", "reason": "Free-text or contextual content is withheld by the safe profile and is included only after explicit advanced-profile selection and active-content screening." }, { "id": "NAV-CL-E003-F075", "register_field": "last_updated", "classification": "public_by_default", "reason": "Controlled identifiers, bounded status values, dates, version references, and lifecycle links can appear in the minimized profile after active-content screening." } ], "packet_members": [ { "id": "NAV-CL-E003-M01", "name": "public-register.json", "media_type": "application/json", "description": "Metadata-minimized NAV-CL-E001 projection." }, { "id": "NAV-CL-E003-M02", "name": "validation-summary.json", "media_type": "application/json", "description": "Bounded NAV-CL-E002 summary with diagnostic observations removed." }, { "id": "NAV-CL-E003-M03", "name": "redaction-and-unresolved-issues.md", "media_type": "text/markdown", "description": "Human-readable exclusions, unresolved states, and publication checks." }, { "id": "NAV-CL-E003-M04", "name": "transformations.json", "media_type": "application/json", "description": "Field-level inclusion and removal ledger that never echoes removed values." }, { "id": "NAV-CL-E003-M05", "name": "manifest.json", "media_type": "application/json", "description": "Machine manifest, source hashes, rule-set identity, selected profile, and member contract." }, { "id": "NAV-CL-E003-M06", "name": "human-sign-off.md", "media_type": "text/markdown", "description": "Printable accountable-review worksheet." }, { "id": "NAV-CL-E003-M07", "name": "LIMITATIONS.txt", "media_type": "text/plain", "description": "Plain-language authority, privacy, security, and publication limitations." }, { "id": "NAV-CL-E003-M08", "name": "SHA256SUMS.txt", "media_type": "text/plain", "description": "SHA-256 checksums for every other packet member." } ], "zip_contract": { "compression": "stored", "fixed_timestamp": "1980-01-01T00:00:00Z", "fixed_dos_date": 33, "fixed_dos_time": 0, "unix_file_mode": "0644", "creator_system": "Unix", "utf8_flag": true, "member_order": [ "public-register.json", "validation-summary.json", "redaction-and-unresolved-issues.md", "transformations.json", "manifest.json", "human-sign-off.md", "LIMITATIONS.txt", "SHA256SUMS.txt" ], "line_endings": "LF", "json_serialization": "UTF-8, recursively lexicographically sorted object keys, two-space indentation, trailing LF", "checksum_scope": "Every member except SHA256SUMS.txt; checksum lines sorted in packet member order." }, "limits": { "max_validation_report_bytes": 1048576, "max_register_bytes": 2097152, "max_records": 5000, "max_json_depth": 8, "max_field_characters": 16384, "max_diagnostics": 2000, "max_source_filename_characters": 160, "max_output_bytes": 20971520 }, "validation_report_required_keys": [ "schema", "validator_id", "validator_release", "register_id", "register_release", "processed_at", "source", "record_count", "severity_counts", "category_results", "publication_state", "diagnostics", "applied_rule_ids", "exclusions_and_limitations", "authority_boundary" ], "validation_report_allowed_keys": [ "schema", "validator_id", "validator_release", "register_id", "register_release", "processed_at", "source", "record_count", "severity_counts", "category_results", "publication_state", "diagnostics", "applied_rule_ids", "exclusions_and_limitations", "authority_boundary" ], "validation_report_source_required_keys": [ "name", "bytes", "sha256", "format", "original_preserved" ], "category_order": [ "structural_validity", "evidentiary_completeness", "privacy_risk", "critical_gate_state", "unresolved_contradictions", "unavailable_evidence", "human_review" ], "validator_diagnostic_projection": [ { "id": "NAV-CL-E002-D001", "code": "FILE_TOO_LARGE", "severity": "error", "category": "structural_validity", "title": "Selected file exceeds the local limit" }, { "id": "NAV-CL-E002-D002", "code": "UNSUPPORTED_FORMAT", "severity": "error", "category": "structural_validity", "title": "Input is not an accepted CSV or JSON file" }, { "id": "NAV-CL-E002-D003", "code": "MALFORMED_ARCHIVE", "severity": "error", "category": "structural_validity", "title": "Archive input is not processed" }, { "id": "NAV-CL-E002-D004", "code": "INVALID_UTF8", "severity": "error", "category": "structural_validity", "title": "Input is not strict UTF-8 text" }, { "id": "NAV-CL-E002-D005", "code": "FORBIDDEN_CONTROL_CHARACTER", "severity": "error", "category": "privacy_risk", "title": "Unexpected control character detected" }, { "id": "NAV-CL-E002-D006", "code": "UNICODE_DIRECTIONAL_CONTROL", "severity": "error", "category": "privacy_risk", "title": "Unicode direction-control character detected" }, { "id": "NAV-CL-E002-D007", "code": "PARSE_ERROR", "severity": "error", "category": "structural_validity", "title": "The file could not be parsed" }, { "id": "NAV-CL-E002-D008", "code": "EMPTY_RECORD_SET", "severity": "warning", "category": "evidentiary_completeness", "title": "No completed evidence records were found" }, { "id": "NAV-CL-E002-D009", "code": "RECORD_LIMIT_EXCEEDED", "severity": "error", "category": "structural_validity", "title": "Record count exceeds the bounded limit" }, { "id": "NAV-CL-E002-D010", "code": "CELL_LIMIT_EXCEEDED", "severity": "error", "category": "structural_validity", "title": "A field exceeds the bounded character limit" }, { "id": "NAV-CL-E002-D011", "code": "CSV_COLUMN_COUNT_MISMATCH", "severity": "error", "category": "structural_validity", "title": "CSV row width does not match the header" }, { "id": "NAV-CL-E002-D012", "code": "DUPLICATE_HEADER", "severity": "error", "category": "structural_validity", "title": "CSV contains a duplicate header" }, { "id": "NAV-CL-E002-D013", "code": "CONFUSABLE_HEADER", "severity": "error", "category": "structural_validity", "title": "Header is visually or Unicode-confusable with another field" }, { "id": "NAV-CL-E002-D014", "code": "UNKNOWN_HEADER", "severity": "error", "category": "structural_validity", "title": "Unknown field name is present" }, { "id": "NAV-CL-E002-D015", "code": "MISSING_HEADER", "severity": "error", "category": "structural_validity", "title": "Canonical field is missing" }, { "id": "NAV-CL-E002-D016", "code": "HEADER_ORDER_CHANGED", "severity": "notice", "category": "structural_validity", "title": "Canonical headers are in a different order" }, { "id": "NAV-CL-E002-D017", "code": "JSON_TOP_LEVEL_TYPE", "severity": "error", "category": "structural_validity", "title": "JSON top level must be an object" }, { "id": "NAV-CL-E002-D018", "code": "JSON_UNKNOWN_TOP_LEVEL_KEY", "severity": "error", "category": "structural_validity", "title": "Unexpected JSON top-level key is present" }, { "id": "NAV-CL-E002-D019", "code": "JSON_REQUIRED_TOP_LEVEL_KEY", "severity": "error", "category": "structural_validity", "title": "Required JSON identity key is missing" }, { "id": "NAV-CL-E002-D020", "code": "JSON_DEPTH_EXCEEDED", "severity": "error", "category": "structural_validity", "title": "JSON nesting exceeds the bounded depth" }, { "id": "NAV-CL-E002-D021", "code": "PROTOTYPE_LIKE_KEY", "severity": "error", "category": "privacy_risk", "title": "Prototype-like object key detected" }, { "id": "NAV-CL-E002-D022", "code": "RECORD_TYPE_INVALID", "severity": "error", "category": "structural_validity", "title": "Evidence record must be a flat object" }, { "id": "NAV-CL-E002-D023", "code": "UNKNOWN_FIELD", "severity": "error", "category": "structural_validity", "title": "Unknown record field is present" }, { "id": "NAV-CL-E002-D024", "code": "MISSING_FIELD", "severity": "warning", "category": "evidentiary_completeness", "title": "Canonical record field is absent" }, { "id": "NAV-CL-E002-D025", "code": "NONSCALAR_FIELD", "severity": "error", "category": "structural_validity", "title": "Record field contains a nested or non-text value" }, { "id": "NAV-CL-E002-D026", "code": "SCHEMA_ID_MISMATCH", "severity": "error", "category": "structural_validity", "title": "Register schema identity does not match" }, { "id": "NAV-CL-E002-D027", "code": "REGISTER_RELEASE_MISMATCH", "severity": "error", "category": "structural_validity", "title": "Register release does not match the validator contract" }, { "id": "NAV-CL-E002-D028", "code": "REGISTER_ID_MISMATCH", "severity": "error", "category": "structural_validity", "title": "Register identity does not match NAV-CL-E001" }, { "id": "NAV-CL-E002-D029", "code": "PLACEHOLDER_REMAINS", "severity": "warning", "category": "evidentiary_completeness", "title": "Template placeholder remains in a completed record" }, { "id": "NAV-CL-E002-D030", "code": "RECORD_ID_INVALID", "severity": "error", "category": "structural_validity", "title": "Record identifier is missing or malformed" }, { "id": "NAV-CL-E002-D031", "code": "RECORD_ID_DUPLICATE", "severity": "error", "category": "structural_validity", "title": "Record identifier is duplicated" }, { "id": "NAV-CL-E002-D032", "code": "EVIDENCE_AREA_ID_INVALID", "severity": "error", "category": "structural_validity", "title": "Evidence-area identifier is unknown" }, { "id": "NAV-CL-E002-D033", "code": "EVIDENCE_STATUS_INVALID", "severity": "error", "category": "structural_validity", "title": "Evidence status is unknown" }, { "id": "NAV-CL-E002-D034", "code": "EVIDENCE_TIER_ID_INVALID", "severity": "error", "category": "structural_validity", "title": "Evidence-class identifier is unknown" }, { "id": "NAV-CL-E002-D035", "code": "AUDIT_DOMAIN_ID_INVALID", "severity": "error", "category": "structural_validity", "title": "Audit-domain identifier is unknown" }, { "id": "NAV-CL-E002-D036", "code": "KIT_ID_INVALID", "severity": "error", "category": "structural_validity", "title": "Implementation-kit identifier is unknown" }, { "id": "NAV-CL-E002-D037", "code": "AFFECTED_AREA_ID_INVALID", "severity": "error", "category": "structural_validity", "title": "Affected evidence-area identifier is unknown" }, { "id": "NAV-CL-E002-D038", "code": "DATE_SYNTAX_INVALID", "severity": "error", "category": "structural_validity", "title": "Date is not a real ISO calendar date" }, { "id": "NAV-CL-E002-D039", "code": "DATE_SEQUENCE_CONFLICT", "severity": "warning", "category": "evidentiary_completeness", "title": "Review or remediation dates conflict" }, { "id": "NAV-CL-E002-D040", "code": "AREA_REQUIRED_FIELD_EMPTY", "severity": "warning", "category": "evidentiary_completeness", "title": "Evidence-area field is empty" }, { "id": "NAV-CL-E002-D041", "code": "CORE_FIELD_EMPTY", "severity": "warning", "category": "evidentiary_completeness", "title": "Core evidence record field is empty" }, { "id": "NAV-CL-E002-D042", "code": "STATUS_SUPPORT_GAP", "severity": "warning", "category": "evidentiary_completeness", "title": "Status-specific supporting field is empty" }, { "id": "NAV-CL-E002-D043", "code": "SPREADSHEET_FORMULA_PREFIX", "severity": "error", "category": "privacy_risk", "title": "CSV cell begins with a spreadsheet formula prefix" }, { "id": "NAV-CL-E002-D044", "code": "MISLEADING_WHITESPACE", "severity": "warning", "category": "privacy_risk", "title": "Value contains misleading leading or trailing whitespace" }, { "id": "NAV-CL-E002-D045", "code": "COGNITIVE_DOSSIER_RISK", "severity": "warning", "category": "privacy_risk", "title": "Text suggests prohibited inquiry or sensitive-profile content" }, { "id": "NAV-CL-E002-D046", "code": "INSTRUCTION_OVERRIDE_TEXT", "severity": "warning", "category": "privacy_risk", "title": "Input contains instruction-like override language" }, { "id": "NAV-CL-E002-D047", "code": "ACTIVE_CONTENT_SCHEME", "severity": "error", "category": "privacy_risk", "title": "Locator uses an active or local content scheme" }, { "id": "NAV-CL-E002-D048", "code": "EMBEDDED_ACTIVE_MARKUP", "severity": "warning", "category": "privacy_risk", "title": "Field appears to contain HTML, script, or embedded-resource markup" }, { "id": "NAV-CL-E002-D049", "code": "CRITICAL_FAILURE_ID_INVALID", "severity": "warning", "category": "critical_gate_state", "title": "Critical-failure field contains an unknown domain ID" }, { "id": "NAV-CL-E002-D050", "code": "CRITICAL_FAILURE_ID_NONCRITICAL", "severity": "warning", "category": "critical_gate_state", "title": "Critical-failure field names a standard domain" }, { "id": "NAV-CL-E002-D051", "code": "CRITICAL_BLOCKER_UNDISCLOSED", "severity": "error", "category": "critical_gate_state", "title": "Critical blocker is not disclosed in critical_gate_failures" }, { "id": "NAV-CL-E002-D052", "code": "FAVORABLE_OUTCOME_WITH_CRITICAL_BLOCKER", "severity": "error", "category": "critical_gate_state", "title": "Favorable outcome language conflicts with a critical blocker" }, { "id": "NAV-CL-E002-D053", "code": "CRITICAL_STATE_UNRESOLVED", "severity": "warning", "category": "critical_gate_state", "title": "Critical-domain review remains unresolved" }, { "id": "NAV-CL-E002-D054", "code": "CONTRADICTION_PRESENT", "severity": "warning", "category": "unresolved_contradictions", "title": "Contradicted evidence status is present" }, { "id": "NAV-CL-E002-D055", "code": "UNAVAILABLE_EVIDENCE_PRESENT", "severity": "warning", "category": "unavailable_evidence", "title": "Required or relevant evidence is unavailable" }, { "id": "NAV-CL-E002-D056", "code": "SUPERSESSION_SELF_REFERENCE", "severity": "error", "category": "structural_validity", "title": "Record supersedes itself" }, { "id": "NAV-CL-E002-D057", "code": "SUPERSESSION_TARGET_OUTSIDE_FILE", "severity": "notice", "category": "human_review", "title": "Supersession target is not present in this file" }, { "id": "NAV-CL-E002-D058", "code": "SUPERSESSION_CYCLE", "severity": "warning", "category": "human_review", "title": "Supersession cycle detected" }, { "id": "NAV-CL-E002-D059", "code": "HUMAN_REVIEW_REQUIRED", "severity": "notice", "category": "human_review", "title": "Human review remains required" }, { "id": "NAV-CL-E002-D060", "code": "SOURCE_HASH_UNAVAILABLE", "severity": "notice", "category": "human_review", "title": "Browser source hash was unavailable" }, { "id": "NAV-CL-E002-D061", "code": "CSV_RELEASE_STRUCTURALLY_INFERRED", "severity": "notice", "category": "structural_validity", "title": "CSV release is inferred from its field contract" }, { "id": "NAV-CL-E002-D062", "code": "TEMPLATE_COLUMN_CONTRACT_MISMATCH", "severity": "error", "category": "structural_validity", "title": "JSON template_columns differs from NAV-CL-E001" }, { "id": "NAV-CL-E002-D063", "code": "CSV_EXTRA_VALUES", "severity": "error", "category": "structural_validity", "title": "CSV row contains values beyond the canonical header" }, { "id": "NAV-CL-E002-D064", "code": "BLANK_RECORD_ROW", "severity": "notice", "category": "evidentiary_completeness", "title": "Blank CSV row was ignored" }, { "id": "NAV-CL-E002-D065", "code": "DIAGNOSTIC_LIMIT_REACHED", "severity": "warning", "category": "human_review", "title": "Diagnostic output was truncated" } ], "canonical_register_fields": [ "record_id", "register_id", "evidence_area_id", "control_or_claim", "evidence_status", "evidence_tier_ids", "audit_domain_ids", "kit_ids", "evidence_locator", "public_summary_locator", "provenance_source", "provenance_custodian", "collected_on", "integrity_reference", "system_or_process", "product_or_model_version", "build_or_release", "configuration_scope", "deployment_region_or_context", "test_account_state", "test_date", "data_flow_scope", "retention_scope", "policy_or_authority_title", "policy_or_authority_locator", "approving_body_or_role", "approval_date", "effective_date", "authority_scope", "vendor_clause_scope", "emergency_exception_scope", "sunset_or_expiry", "data_or_inference_class", "deletion_rule", "deletion_method", "deletion_completed_on", "deletion_verification_method", "downstream_deletion_status", "deletion_receipt_or_log", "exceptions_or_holds", "finding_or_issue_id", "remediation_owner_role", "remediation_action", "priority_or_gate", "due_date", "retest_method", "retest_date", "challenge_or_appeal_state", "closure_evidence_locator", "residual_risk", "incident_trigger", "trigger_threshold", "observed_on", "incident_owner_role", "containment_action", "affected_evidence_area_ids", "notification_or_notice_duty", "reaudit_scope", "incident_record_locator", "last_reviewed_on", "next_review_date", "review_cadence", "material_change_triggers", "lifecycle_assumptions", "monitoring_owner_role", "supersedes_record_id", "superseded_by_record_id", "review_outcome", "confidentiality_basis", "known_unknowns", "unavailable_evidence", "critical_gate_failures", "limitations", "prepared_by_role", "last_updated" ], "formula_prefixes": [ "=", "+", "-", "@" ], "active_url_schemes": [ "javascript:", "data:", "blob:", "file:", "vbscript:" ], "prototype_like_keys": [ "__proto__", "prototype", "constructor" ], "instruction_override_terms": [ "ignore previous instructions", "ignore all instructions", "system prompt", "developer message", "override the builder", "change the allowlist", "disable redaction", "include the original" ], "sensitive_pattern_terms": [ "password", "passphrase", "api key", "access token", "refresh token", "bearer token", "private key", "client secret", "session cookie", "device id", "imei", "mac address", "social security", "passport number", "private email", "personal phone" ], "favorable_outcome_terms": [ "pass", "passed", "compliant", "certified", "approved", "safe", "secure", "verified" ], "diagnostic_catalog": [ { "id": "NAV-CL-E003-D001", "code": "REPORT_FILE_TOO_LARGE", "severity": "error", "category": "input_boundary", "title": "Validation report exceeds the byte limit", "explanation": "The selected validation report is larger than the published local-processing limit.", "corrective_guidance": "Use the unmodified bounded NAV-CL-E002 JSON report or inspect why it grew unexpectedly." }, { "id": "NAV-CL-E003-D002", "code": "REPORT_UNSUPPORTED_FORMAT", "severity": "error", "category": "input_boundary", "title": "Validation report is not supported JSON", "explanation": "The builder accepts one uncompressed NAV-CL-E002 JSON validation report.", "corrective_guidance": "Select the JSON report generated by the current local validator; archives and other formats are rejected." }, { "id": "NAV-CL-E003-D003", "code": "REPORT_INVALID_UTF8", "severity": "error", "category": "input_boundary", "title": "Validation report is not strict UTF-8", "explanation": "The selected report could not be decoded as strict UTF-8.", "corrective_guidance": "Regenerate the report from NAV-CL-E002 without changing its encoding." }, { "id": "NAV-CL-E003-D004", "code": "REPORT_PARSE_ERROR", "severity": "error", "category": "report_integrity", "title": "Validation report JSON is malformed", "explanation": "The report cannot be parsed as one inert JSON object.", "corrective_guidance": "Regenerate the report and do not repair it with a formatter that may alter keys or values." }, { "id": "NAV-CL-E003-D005", "code": "REPORT_DUPLICATE_KEY", "severity": "error", "category": "report_integrity", "title": "Validation report contains a duplicate key", "explanation": "Duplicate JSON keys are ambiguous across parsers and are rejected.", "corrective_guidance": "Regenerate the report from NAV-CL-E002 and remove the ambiguous copy." }, { "id": "NAV-CL-E003-D006", "code": "REPORT_CONFUSABLE_KEY", "severity": "error", "category": "report_integrity", "title": "Validation report contains a Unicode-confusable key", "explanation": "A normalized key collides with a differently encoded key.", "corrective_guidance": "Use exact canonical report keys from NAV-CL-E002." }, { "id": "NAV-CL-E003-D007", "code": "REPORT_PROTOTYPE_KEY", "severity": "error", "category": "report_integrity", "title": "Validation report contains a prototype-like key", "explanation": "Prototype-like object keys are outside the report contract.", "corrective_guidance": "Regenerate the report from the accepted validator." }, { "id": "NAV-CL-E003-D008", "code": "REPORT_CONTROL_CHARACTER", "severity": "error", "category": "report_integrity", "title": "Validation report contains a forbidden control character", "explanation": "Control characters can produce cross-parser and display ambiguity.", "corrective_guidance": "Regenerate the report as normalized UTF-8 JSON." }, { "id": "NAV-CL-E003-D009", "code": "REPORT_BIDI_OVERRIDE", "severity": "error", "category": "report_integrity", "title": "Validation report contains a directional override", "explanation": "Bidirectional override characters can conceal key or value order.", "corrective_guidance": "Remove directional controls and regenerate the report." }, { "id": "NAV-CL-E003-D010", "code": "REPORT_SCHEMA_MISMATCH", "severity": "error", "category": "report_integrity", "title": "Validation report schema does not match", "explanation": "The selected object is not the accepted NAV-CL-E002 result schema.", "corrective_guidance": "Select a current local-evidence-validation report." }, { "id": "NAV-CL-E003-D011", "code": "REPORT_VALIDATOR_ID_MISMATCH", "severity": "error", "category": "report_integrity", "title": "Validator identity does not match", "explanation": "The report does not identify NAV-CL-E002.", "corrective_guidance": "Regenerate it with the accepted local validator." }, { "id": "NAV-CL-E003-D012", "code": "REPORT_VALIDATOR_RELEASE_MISMATCH", "severity": "error", "category": "report_integrity", "title": "Validator release does not match", "explanation": "The report is not bound to the accepted validator release.", "corrective_guidance": "Use the release-matched validator or preserve the older report outside this packet workflow." }, { "id": "NAV-CL-E003-D013", "code": "REPORT_REGISTER_ID_MISMATCH", "severity": "error", "category": "report_integrity", "title": "Report register identity does not match", "explanation": "The report is not bound to NAV-CL-E001.", "corrective_guidance": "Validate a NAV-CL-E001 register with NAV-CL-E002." }, { "id": "NAV-CL-E003-D014", "code": "REPORT_REGISTER_RELEASE_MISMATCH", "severity": "error", "category": "report_integrity", "title": "Report register release does not match", "explanation": "The report references a different register release.", "corrective_guidance": "Regenerate the report against the current register authority." }, { "id": "NAV-CL-E003-D015", "code": "REPORT_PUBLICATION_STATE_MISMATCH", "severity": "error", "category": "gate_preservation", "title": "Human-review state is missing or changed", "explanation": "NAV-CL-E002 reports must retain human_review_required.", "corrective_guidance": "Do not use a report that converts the review requirement into favorable language." }, { "id": "NAV-CL-E003-D016", "code": "REPORT_DIAGNOSTIC_CONTRACT_MISMATCH", "severity": "error", "category": "report_integrity", "title": "A validator diagnostic was altered", "explanation": "A diagnostic ID, code, severity, category, or title differs from the accepted NAV-CL-E002 projection.", "corrective_guidance": "Regenerate the report; do not edit diagnostic meaning." }, { "id": "NAV-CL-E003-D017", "code": "REPORT_REQUIRED_KEY_MISSING", "severity": "error", "category": "report_integrity", "title": "Validation report is missing a required key", "explanation": "The report cannot be safely interpreted under the packet contract.", "corrective_guidance": "Regenerate the complete NAV-CL-E002 report." }, { "id": "NAV-CL-E003-D018", "code": "REPORT_SOURCE_BINDING_INVALID", "severity": "error", "category": "report_integrity", "title": "Validation report source binding is invalid", "explanation": "The report source hash, byte count, format, or preservation marker is malformed.", "corrective_guidance": "Regenerate the report and preserve its source-binding object." }, { "id": "NAV-CL-E003-D019", "code": "REPORT_FILENAME_UNSAFE", "severity": "error", "category": "input_boundary", "title": "A source filename contains unsafe syntax", "explanation": "Path separators, traversal, device names, controls, directional overrides, or excessive length are not accepted.", "corrective_guidance": "Rename the local file to a simple basename and regenerate or reselect it." }, { "id": "NAV-CL-E003-D020", "code": "REGISTER_FILE_TOO_LARGE", "severity": "error", "category": "input_boundary", "title": "Optional register exceeds the byte limit", "explanation": "The selected register is larger than the published local-processing limit.", "corrective_guidance": "Split the register into bounded sets and produce a separately bound validation report for each set." }, { "id": "NAV-CL-E003-D021", "code": "REGISTER_UNSUPPORTED_FORMAT", "severity": "error", "category": "input_boundary", "title": "Optional register is not supported CSV or JSON", "explanation": "Only uncompressed NAV-CL-E001 CSV or JSON is accepted.", "corrective_guidance": "Select the exact completed register used to produce the validation report." }, { "id": "NAV-CL-E003-D022", "code": "REGISTER_INVALID_UTF8", "severity": "error", "category": "input_boundary", "title": "Optional register is not strict UTF-8", "explanation": "The register could not be decoded as strict UTF-8.", "corrective_guidance": "Export the register as UTF-8 CSV or JSON." }, { "id": "NAV-CL-E003-D023", "code": "REGISTER_PARSE_ERROR", "severity": "error", "category": "register_integrity", "title": "Optional register is malformed", "explanation": "The selected register cannot be parsed as inert CSV or JSON.", "corrective_guidance": "Correct it with the NAV-CL-E001 template and revalidate with NAV-CL-E002." }, { "id": "NAV-CL-E003-D024", "code": "REGISTER_DUPLICATE_KEY_OR_HEADER", "severity": "error", "category": "register_integrity", "title": "Optional register contains a duplicate key or header", "explanation": "Duplicate field identities are ambiguous and are rejected.", "corrective_guidance": "Use each canonical NAV-CL-E001 field exactly once." }, { "id": "NAV-CL-E003-D025", "code": "REGISTER_CONFUSABLE_KEY_OR_HEADER", "severity": "error", "category": "register_integrity", "title": "Optional register contains a confusable key or header", "explanation": "A normalized field identity collides with a differently encoded identity.", "corrective_guidance": "Use exact ASCII field names from NAV-CL-E001." }, { "id": "NAV-CL-E003-D026", "code": "REGISTER_PROTOTYPE_KEY", "severity": "error", "category": "register_integrity", "title": "Optional register contains a prototype-like key", "explanation": "Prototype-like names are outside the register contract.", "corrective_guidance": "Remove the unsupported key and revalidate." }, { "id": "NAV-CL-E003-D027", "code": "REGISTER_CONTROL_CHARACTER", "severity": "error", "category": "register_integrity", "title": "Optional register contains a forbidden control character", "explanation": "Control characters can conceal content or create cross-parser differences.", "corrective_guidance": "Remove them from a governed source copy and revalidate." }, { "id": "NAV-CL-E003-D028", "code": "REGISTER_BIDI_OVERRIDE", "severity": "error", "category": "register_integrity", "title": "Optional register contains a directional override", "explanation": "Directional controls can conceal field or value order.", "corrective_guidance": "Remove them from a governed source copy and revalidate." }, { "id": "NAV-CL-E003-D029", "code": "REGISTER_SCHEMA_MISMATCH", "severity": "error", "category": "register_integrity", "title": "Optional JSON register schema does not match", "explanation": "The selected JSON is not a NAV-CL-E001 template projection.", "corrective_guidance": "Use the current JSON template or a canonical CSV projection." }, { "id": "NAV-CL-E003-D030", "code": "REGISTER_RELEASE_MISMATCH", "severity": "error", "category": "register_integrity", "title": "Optional register release does not match", "explanation": "The selected register is bound to another release.", "corrective_guidance": "Use the exact release validated by the selected report." }, { "id": "NAV-CL-E003-D031", "code": "REGISTER_ID_MISMATCH", "severity": "error", "category": "register_integrity", "title": "Optional register identity does not match", "explanation": "The selected register is not NAV-CL-E001.", "corrective_guidance": "Select the completed NAV-CL-E001 register." }, { "id": "NAV-CL-E003-D032", "code": "REGISTER_RECORD_LIMIT", "severity": "error", "category": "register_integrity", "title": "Optional register exceeds the record limit", "explanation": "The number of parsed records exceeds the bounded packet limit.", "corrective_guidance": "Split the register into separately validated review sets." }, { "id": "NAV-CL-E003-D033", "code": "REGISTER_SOURCE_HASH_MISMATCH", "severity": "error", "category": "report_integrity", "title": "Optional register does not match the validation report source hash", "explanation": "The separately selected register bytes are not the source bound by the report.", "corrective_guidance": "Select the exact original register or generate a new validation report for this file." }, { "id": "NAV-CL-E003-D034", "code": "REGISTER_NOT_SELECTED", "severity": "notice", "category": "input_boundary", "title": "No optional register was selected", "explanation": "The packet will contain an empty public-register projection and the bounded validation summary.", "corrective_guidance": "Select the exact validated register only when a minimized public projection is needed." }, { "id": "NAV-CL-E003-D035", "code": "UNKNOWN_FIELD_EXCLUDED", "severity": "warning", "category": "minimization", "title": "An unknown register field was excluded", "explanation": "The builder never infers that an unrecognized field is safe.", "corrective_guidance": "Review the source field outside the packet and update the canonical contract deliberately if appropriate." }, { "id": "NAV-CL-E003-D036", "code": "EXCLUDED_FIELD_REMOVED", "severity": "notice", "category": "minimization", "title": "An excluded-by-default field value was removed", "explanation": "A non-empty high-risk field was omitted without echoing its value.", "corrective_guidance": "Return to the unchanged local source if an accountable reviewer needs to inspect it." }, { "id": "NAV-CL-E003-D037", "code": "OPTIONAL_FIELD_WITHHELD", "severity": "notice", "category": "minimization", "title": "An optional field was withheld by the safe profile", "explanation": "The safe profile exports no optional free-text values.", "corrective_guidance": "Use the advanced profile only after human review and only for values suitable for public release." }, { "id": "NAV-CL-E003-D038", "code": "EMPTY_FIELD_OMITTED", "severity": "notice", "category": "minimization", "title": "An empty field was omitted", "explanation": "Blank values are not copied into the minimized projection.", "corrective_guidance": "No action is required unless the underlying register should contain evidence." }, { "id": "NAV-CL-E003-D039", "code": "ACTIVE_MARKUP_EXCLUDED", "severity": "warning", "category": "active_content", "title": "Markup-like content was excluded", "explanation": "HTML, SVG, script, style, event-handler, Markdown image, or autolink syntax is never evaluated or exported.", "corrective_guidance": "Replace it with a plain bounded description in the governed source and revalidate." }, { "id": "NAV-CL-E003-D040", "code": "ACTIVE_URL_SCHEME_EXCLUDED", "severity": "warning", "category": "active_content", "title": "An active URL scheme was excluded", "explanation": "JavaScript, data, blob, file, VBScript, and similar active schemes are not exportable.", "corrective_guidance": "Use inert text or an independently reviewed public locator outside this workflow." }, { "id": "NAV-CL-E003-D041", "code": "SPREADSHEET_FORMULA_EXCLUDED", "severity": "warning", "category": "active_content", "title": "A spreadsheet formula prefix was excluded", "explanation": "A leading equals, plus, minus, or at-sign can execute when opened in spreadsheet software.", "corrective_guidance": "Use inert text and retain the spreadsheet-viewer warning." }, { "id": "NAV-CL-E003-D042", "code": "SENSITIVE_PATTERN_EXCLUDED", "severity": "warning", "category": "minimization", "title": "A likely secret, credential, private contact, person-level identifier, or device identifier was excluded", "explanation": "Conservative pattern checks found content unsuitable for automated publication.", "corrective_guidance": "Review the unchanged local source and publish only a separately approved derivative." }, { "id": "NAV-CL-E003-D043", "code": "INTERNAL_PATH_EXCLUDED", "severity": "warning", "category": "minimization", "title": "An exact local or internal path was excluded", "explanation": "Filesystem and internal-path strings can disclose environment details or become active locators.", "corrective_guidance": "Replace with a public, reviewed reference if publication is necessary." }, { "id": "NAV-CL-E003-D044", "code": "INSTRUCTION_OVERRIDE_EXCLUDED", "severity": "warning", "category": "active_content", "title": "Instruction-like override text was excluded", "explanation": "Selected content cannot change the builder contract or direct the runtime.", "corrective_guidance": "Treat source instructions as inert data and review them outside the packet." }, { "id": "NAV-CL-E003-D045", "code": "FIELD_VALUE_TOO_LONG_EXCLUDED", "severity": "warning", "category": "minimization", "title": "A field value exceeded the export length limit", "explanation": "Oversized values are excluded to bound memory, review burden, and hidden-content risk.", "corrective_guidance": "Create a separately reviewed public summary rather than exporting the full value." }, { "id": "NAV-CL-E003-D046", "code": "STRUCTURAL_ERRORS_PRESERVED", "severity": "warning", "category": "gate_preservation", "title": "Structural errors remain visible in the packet", "explanation": "The selected report contains structural-validity errors.", "corrective_guidance": "Resolve or explicitly document them; the packet does not convert them into a pass." }, { "id": "NAV-CL-E003-D047", "code": "CRITICAL_STATE_PRESERVED", "severity": "warning", "category": "gate_preservation", "title": "Critical-domain blockers or uncertainty remain visible", "explanation": "The selected report identifies a blocked or unresolved critical state.", "corrective_guidance": "Do not use favorable, compliant, safe, certified, approved, or equivalent language." }, { "id": "NAV-CL-E003-D048", "code": "CONTRADICTION_PRESERVED", "severity": "warning", "category": "gate_preservation", "title": "Contradictions remain visible in the packet", "explanation": "The selected report identifies unresolved contradictions.", "corrective_guidance": "Expose and resolve the contradiction rather than averaging it away." }, { "id": "NAV-CL-E003-D049", "code": "UNAVAILABLE_EVIDENCE_PRESERVED", "severity": "warning", "category": "gate_preservation", "title": "Unavailable evidence remains visible in the packet", "explanation": "The selected report identifies required evidence that was unavailable.", "corrective_guidance": "State the consequence, owner, and next attempt." }, { "id": "NAV-CL-E003-D050", "code": "NOT_REVIEWED_CRITICAL_PRESERVED", "severity": "warning", "category": "gate_preservation", "title": "Not-reviewed critical evidence remains visible", "explanation": "The selected report indicates a critical area that has not completed review.", "corrective_guidance": "Keep the state open and block favorable summary language." }, { "id": "NAV-CL-E003-D051", "code": "HUMAN_REVIEW_REQUIRED", "severity": "notice", "category": "human_review", "title": "Human review remains required", "explanation": "Packet construction cannot establish source truth, independence, legal sufficiency, confidentiality, privacy, security, or publication suitability.", "corrective_guidance": "Complete the sign-off worksheet with accountable reviewers before publication." }, { "id": "NAV-CL-E003-D052", "code": "SAFE_PROFILE_APPLIED", "severity": "notice", "category": "minimization", "title": "Safe minimized profile applied", "explanation": "Only public-by-default fields that passed inert-content checks were eligible for export.", "corrective_guidance": "Inspect the transformation ledger and unresolved issues before publication." }, { "id": "NAV-CL-E003-D053", "code": "ADVANCED_PROFILE_APPLIED", "severity": "warning", "category": "minimization", "title": "Advanced human-review profile applied", "explanation": "Optional free-text fields became eligible after explicit selection, but excluded-by-default fields remain omitted.", "corrective_guidance": "Perform line-by-line human review of every included optional value." }, { "id": "NAV-CL-E003-D054", "code": "SOURCE_HASH_UNAVAILABLE", "severity": "warning", "category": "report_integrity", "title": "A source hash was unavailable", "explanation": "The builder could not prove byte binding for one selected source.", "corrective_guidance": "Do not assume the report and register match; record an accountable manual binding decision." }, { "id": "NAV-CL-E003-D055", "code": "PACKET_GENERATED", "severity": "notice", "category": "output_integrity", "title": "Deterministic packet bytes were generated", "explanation": "The packet follows the fixed member, serialization, mode, timestamp, checksum, and ordering contract.", "corrective_guidance": "Inspect the manifest and downloaded ZIP; deterministic structure is not evidence truth or certification." }, { "id": "NAV-CL-E003-D056", "code": "DIAGNOSTIC_LIMIT_REACHED", "severity": "warning", "category": "output_integrity", "title": "Builder diagnostic limit reached", "explanation": "Additional findings were not rendered after the published cap.", "corrective_guidance": "Reduce the input or inspect it with a controlled offline process." }, { "id": "NAV-CL-E003-D057", "code": "OUTPUT_LIMIT_EXCEEDED", "severity": "error", "category": "output_integrity", "title": "Generated output exceeds the packet byte limit", "explanation": "The packet would exceed the bounded output limit.", "corrective_guidance": "Reduce the input or use smaller separately reviewed packets." }, { "id": "NAV-CL-E003-D058", "code": "PROCESS_INTERRUPTED", "severity": "notice", "category": "input_boundary", "title": "Local processing was reset or interrupted", "explanation": "In-memory application references and generated object URLs were cleared as far as the page can demonstrate.", "corrective_guidance": "Reselect files to start a new explicit local operation." } ], "fatal_diagnostic_codes": [ "REPORT_FILE_TOO_LARGE", "REPORT_UNSUPPORTED_FORMAT", "REPORT_INVALID_UTF8", "REPORT_PARSE_ERROR", "REPORT_DUPLICATE_KEY", "REPORT_CONFUSABLE_KEY", "REPORT_PROTOTYPE_KEY", "REPORT_CONTROL_CHARACTER", "REPORT_BIDI_OVERRIDE", "REPORT_SCHEMA_MISMATCH", "REPORT_VALIDATOR_ID_MISMATCH", "REPORT_VALIDATOR_RELEASE_MISMATCH", "REPORT_REGISTER_ID_MISMATCH", "REPORT_REGISTER_RELEASE_MISMATCH", "REPORT_PUBLICATION_STATE_MISMATCH", "REPORT_DIAGNOSTIC_CONTRACT_MISMATCH", "REPORT_REQUIRED_KEY_MISSING", "REPORT_SOURCE_BINDING_INVALID", "REPORT_FILENAME_UNSAFE", "REGISTER_FILE_TOO_LARGE", "REGISTER_UNSUPPORTED_FORMAT", "REGISTER_INVALID_UTF8", "REGISTER_PARSE_ERROR", "REGISTER_DUPLICATE_KEY_OR_HEADER", "REGISTER_CONFUSABLE_KEY_OR_HEADER", "REGISTER_PROTOTYPE_KEY", "REGISTER_CONTROL_CHARACTER", "REGISTER_BIDI_OVERRIDE", "REGISTER_SCHEMA_MISMATCH", "REGISTER_RELEASE_MISMATCH", "REGISTER_ID_MISMATCH", "REGISTER_RECORD_LIMIT", "REGISTER_SOURCE_HASH_MISMATCH", "OUTPUT_LIMIT_EXCEEDED" ], "authority_boundary": "NAV-CL-E003 prepares a deterministic publication derivative only. NAV-CL-E001 remains the evidence-register authority, NAV-CL-E002 remains the structural and risk validator, AUDIT-CL-001 remains the audit authority, and the implementation kits retain their own bodies. The packet is not an audit, attestation, signature, evidence repository, legal opinion, privilege determination, compliance decision, privacy or security certification, provider score, maturity grade, or proof that any underlying claim is true, independent, complete, current, lawful, confidential, or suitable for publication.", "local_processing_boundary": "The first-party browser script reads selected files only after explicit user action, makes no fetch, XMLHttpRequest, beacon, WebSocket, WebTransport, EventSource, form submission, cookie, localStorage, sessionStorage, IndexedDB, Cache API, service-worker, BroadcastChannel, SharedWorker, remote-font, CDN, telemetry, or third-party-code call, and releases application object URLs and references on replacement, reset, page hide, and completed download when technically safe. Browser extensions, endpoint monitoring, swap, backups, print systems, download history, user-selected storage, and garbage collection remain outside the proof.", "originals_boundary": "The builder never includes either selected original in any supported profile. Returning to the unchanged local source is the only way to recover omitted values. Removed values are represented only by field identity, classification, action, and reason; their content and value hashes are not copied into the packet.", "gate_boundary": "The builder preserves report diagnostics, category states, contradictions, unavailable evidence, and critical uncertainty without changing severity, suppressing unfavorable findings, computing a hidden score, or converting human_review_required into favorable language. A packet with unresolved critical, contradicted, unavailable, unreviewed, or structurally invalid state says so in the validation summary, manifest, unresolved-issues file, and sign-off worksheet.", "threat_model": [ { "threat": "Malicious local report or register", "treatment": "Detected or mitigated with strict formats, byte/depth/record limits, duplicate and confusable key rejection, inert parsing, allowlists, value screening, fixed output names, and no evaluation." }, { "threat": "Same-origin compromise", "treatment": "Outside the builder proof; the static package minimizes runtime and uses a strict CSP, but a compromised origin or browser can observe local processing." }, { "threat": "Browser extensions or endpoint monitoring", "treatment": "Outside scope and stated before selection and in every packet limitations file." }, { "threat": "Malicious spreadsheet viewers", "treatment": "Formula-prefixed values are excluded and no CSV is generated, but downstream application behavior remains outside scope." }, { "threat": "Accidental publication", "treatment": "Mitigated by safe-default minimization, explicit advanced selection, preview, transformation ledger, sign-off worksheet, and no automatic download." }, { "threat": "False reassurance", "treatment": "Mitigated by mandatory human-review language, preserved unfavorable diagnostics, no score or badge, and repeated authority limitations." } ], "report_limitations": [ "Structural and deterministic packet construction does not establish evidence truth, independence, completeness, currency, legal sufficiency, confidentiality, privilege, privacy, security, provider conduct, or publication suitability.", "Pattern screening is conservative and incomplete; a lack of a warning does not mean a value is safe or non-identifying.", "The safe profile minimizes fields but cannot prove that a controlled identifier, date, or version is non-sensitive in every context.", "The advanced profile requires accountable line-by-line human review and remains unable to export excluded-by-default fields or selected originals.", "Download handling, archive viewers, operating systems, extensions, endpoint controls, backups, print systems, and subsequent publication are outside the runtime proof." ], "public_downloads": [ { "id": "NAV-CL-E003-T01", "label": "Publication-packet builder contract", "path": "/assets/downloads/private-inquiry-publication-packet-contract.v1.19.0.json", "media_type": "application/json" }, { "id": "NAV-CL-E003-T02", "label": "Offline publication-packet toolkit", "path": "/assets/downloads/private-inquiry-publication-packet-toolkit.v1.19.0.zip", "media_type": "application/zip" } ] }