tegwick
372f671eef
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a070b5-4994-7271-bd8b-7c3dbcedec4b
156 lines
9.6 KiB
Markdown
156 lines
9.6 KiB
Markdown
# itc-evid provenance reading index
|
||
|
||
Historical input only. Current canon and ADR-006 override superseded assertions.
|
||
|
||
- [research/CorpusIndex.md](../source/research/CorpusIndex.md) — d110cd1f6653.
|
||
- [research/README.md](../source/research/README.md) — 1ab93b1176ac.
|
||
- [research/ResearchSeed.md](../source/research/ResearchSeed.md) — 1e432ff04d17.
|
||
- [research/authentication-federation/nist-800-63-4.md](../source/research/authentication-federation/nist-800-63-4.md) — 8697b739399c.
|
||
- [research/authentication-federation/oidc-core-subject-identifiers.md](../source/research/authentication-federation/oidc-core-subject-identifiers.md) — e1a0bf8a2754.
|
||
- [research/authentication-federation/saml-nameid-federation.md](../source/research/authentication-federation/saml-nameid-federation.md) — 394457cf75d2.
|
||
- [research/authentication-federation/shared-signals-caep-risc.md](../source/research/authentication-federation/shared-signals-caep-risc.md) — 7303fd449a83.
|
||
- [research/commercial-identity/beneficial-ownership-kyc-boi.md](../source/research/commercial-identity/beneficial-ownership-kyc-boi.md) — 602aad062291.
|
||
- [research/commercial-identity/commercial-identity-nuance-settlement.md](../source/research/commercial-identity/commercial-identity-nuance-settlement.md) — cabb54601ee7.
|
||
- [research/commercial-identity/commercial-identity-synthesis.md](../source/research/commercial-identity/commercial-identity-synthesis.md) — ac70ecdb2046.
|
||
- [research/commercial-identity/commercial-trust-binding-theory.md](../source/research/commercial-identity/commercial-trust-binding-theory.md) — fc7be6f0641b.
|
||
- [research/commercial-identity/crm-pipeline-commitment-threshold.md](../source/research/commercial-identity/crm-pipeline-commitment-threshold.md) — 459828097e09.
|
||
- [research/commercial-identity/duns-commercial-credit-identity.md](../source/research/commercial-identity/duns-commercial-credit-identity.md) — b33b789b047f.
|
||
- [research/commercial-identity/eidas-eudi-legal-person-wallet.md](../source/research/commercial-identity/eidas-eudi-legal-person-wallet.md) — be8b05990cd0.
|
||
- [research/commercial-identity/kyc-aml-commercial-identity-binding.md](../source/research/commercial-identity/kyc-aml-commercial-identity-binding.md) — 5d3f63465cd7.
|
||
- [research/commercial-identity/legal-person-agency-contract.md](../source/research/commercial-identity/legal-person-agency-contract.md) — c3110cc62b49.
|
||
- [research/commercial-identity/lei-gleif-legal-entity-identifier.md](../source/research/commercial-identity/lei-gleif-legal-entity-identifier.md) — ef2ba7156f6d.
|
||
- [research/commercial-identity/payment-credential-pci-boundary.md](../source/research/commercial-identity/payment-credential-pci-boundary.md) — bcacaee7090c.
|
||
- [research/commercial-identity/registry-identifier-subtypes.md](../source/research/commercial-identity/registry-identifier-subtypes.md) — 1a621787a869.
|
||
- [research/commercial-identity/reputation-assurance-gradient.md](../source/research/commercial-identity/reputation-assurance-gradient.md) — 0c992d05657d.
|
||
- [research/commercial-identity/salesforce-crm-commercial-record.md](../source/research/commercial-identity/salesforce-crm-commercial-record.md) — 52bf8c8dbbd7.
|
||
- [research/entity-resolution-privacy/deterministic-vs-probabilistic-matching.md](../source/research/entity-resolution-privacy/deterministic-vs-probabilistic-matching.md) — 12585f844728.
|
||
- [research/entity-resolution-privacy/gdpr-pseudonymization.md](../source/research/entity-resolution-privacy/gdpr-pseudonymization.md) — de2bfcf7f52b.
|
||
- [research/entity-resolution-privacy/synonymity-assertions.md](../source/research/entity-resolution-privacy/synonymity-assertions.md) — 6ba40ec37221.
|
||
- [research/identity-provisioning/keycloak-organizations.md](../source/research/identity-provisioning/keycloak-organizations.md) — 09c43cdc9ecf.
|
||
- [research/identity-provisioning/ldap-rfc4519-inetorgperson-rfc2798.md](../source/research/identity-provisioning/ldap-rfc4519-inetorgperson-rfc2798.md) — c3f3323a3f25.
|
||
- [research/identity-provisioning/ory-kratos-keto.md](../source/research/identity-provisioning/ory-kratos-keto.md) — 5cd12c38f8d3.
|
||
- [research/identity-provisioning/scim-rfc7643-rfc7644.md](../source/research/identity-provisioning/scim-rfc7643-rfc7644.md) — c5c03952ac2f.
|
||
- [research/identity-provisioning/zitadel-organizations-projects.md](../source/research/identity-provisioning/zitadel-organizations-projects.md) — f4b1b6f4cce3.
|
||
- [research/verifiable-claims/did-core.md](../source/research/verifiable-claims/did-core.md) — cbe5fd46e093.
|
||
- [research/verifiable-claims/openid4vc.md](../source/research/verifiable-claims/openid4vc.md) — e6fcc0612146.
|
||
- [research/verifiable-claims/vc-data-model-2.md](../source/research/verifiable-claims/vc-data-model-2.md) — dae7bc679c6c.
|
||
- [scenarios/ScenarioTests.md](../source/scenarios/ScenarioTests.md) — 400641667064.
|
||
- [terminology/TerminologyConflictMap.md](../source/terminology/TerminologyConflictMap.md) — 06c8134a399a.
|
||
- [terminology/TerminologyInventory.md](../source/terminology/TerminologyInventory.md) — 5d22816b0bfe.
|
||
|
||
## Shared terminology and scenario fragments
|
||
|
||
|
||
### S12. Weak Identity Match From Imported Data
|
||
|
||
Frozen source: [scenarios/ScenarioTests.md](../source/scenarios/ScenarioTests.md) lines 140–150; SHA-256 `b5f26ea04922d59bfe1c7dd240a2348e4afc6cc45a257ea5dfbb733e614649d5`.
|
||
Historical wording; this is not a current model definition.
|
||
|
||
```text
|
||
## S12. Weak Identity Match From Imported Data
|
||
|
||
Expected representation: source Identity Records linked by a weak Synonymity
|
||
Assertion with method, evidence, confidence, scope, and lifecycle state.
|
||
|
||
Checks:
|
||
|
||
- Weak match does not merge accounts.
|
||
- Consumers can reject or quarantine weak links.
|
||
- Evidence source remains visible.
|
||
|
||
```
|
||
|
||
### Conflict: Synonymity, Linking, Matching, Merge
|
||
|
||
Frozen source: [terminology/TerminologyConflictMap.md](../source/terminology/TerminologyConflictMap.md) lines 163–177; SHA-256 `a714d30d2c1bedfcfe3020fa277c5a6226ec408eebd65efc33aadcba9b825ddf`.
|
||
Historical wording; this is not a current model definition.
|
||
|
||
```text
|
||
## Conflict: Synonymity, Linking, Matching, Merge
|
||
|
||
Problem: systems collapse probabilistic matches, verified links, and destructive
|
||
merges into one feature.
|
||
|
||
Source evidence:
|
||
|
||
- Probabilistic matching → weak assertion (`deterministic-vs-probabilistic-matching.md`)
|
||
- OIDC iss+sub binding → strong scoped assertion (`oidc`, `synonymity-assertions` notes)
|
||
- Schema.org sameAs = weak web equivalence (`schema-org` note)
|
||
- GDPR cross-linking raises identifiability risk (`gdpr-pseudonymization.md`)
|
||
- MDM golden record merge = downstream anti-pattern (`deterministic` note)
|
||
|
||
Canonical stance: synonymity is scoped, evidenced, revocable assertion.
|
||
|
||
```
|
||
|
||
### pan / cvv / chd
|
||
|
||
Frozen source: [terminology/TerminologyInventory.md](../source/terminology/TerminologyInventory.md) lines 42–42; SHA-256 `84eacf96d9ff1a172086a00c1ecf31e94f5b594ee4dce3559e8ccd2525ab6b9c`.
|
||
Historical wording; this is not a current model definition.
|
||
|
||
```text
|
||
| pan / cvv / chd | Out of canon | PCI DSS | Downstream PCI vault only. |
|
||
```
|
||
|
||
### star rating / review
|
||
|
||
Frozen source: [terminology/TerminologyInventory.md](../source/terminology/TerminologyInventory.md) lines 63–63; SHA-256 `3dbb10a8ab536c181da9205e3cfb4fae3031e0fd007fb4bb6205bb532e1959f1`.
|
||
Historical wording; this is not a current model definition.
|
||
|
||
```text
|
||
| star rating / review | Reputation Signal | Yelp, Amazon, App Store | Opinion-tier Evidence Source; weak, gamable. |
|
||
```
|
||
|
||
### arbitration award
|
||
|
||
Frozen source: [terminology/TerminologyInventory.md](../source/terminology/TerminologyInventory.md) lines 68–68; SHA-256 `5631838512e0e0b5452b591adc1f4f77f380df18cecf4e6164dab0546207ef67`.
|
||
Historical wording; this is not a current model definition.
|
||
|
||
```text
|
||
| arbitration award | Adjudication Outcome | AAA, ICC, JAMS | Adjudicated-tier dispute result. |
|
||
```
|
||
|
||
### court judgment
|
||
|
||
Frozen source: [terminology/TerminologyInventory.md](../source/terminology/TerminologyInventory.md) lines 69–69; SHA-256 `ba21ec0155b991faea17beea69f8fbcaa4489f51e522ced3b2ded31fe06f4c3e`.
|
||
Historical wording; this is not a current model definition.
|
||
|
||
```text
|
||
| court judgment | Adjudication Outcome | courts | Adjudicated-tier enforcement outcome. |
|
||
```
|
||
|
||
### kyc / cip
|
||
|
||
Frozen source: [terminology/TerminologyInventory.md](../source/terminology/TerminologyInventory.md) lines 78–78; SHA-256 `489f788d80be6f2e796a116a2338e697145669829f355c121e18975dbbfbf13f`.
|
||
Historical wording; this is not a current model definition.
|
||
|
||
```text
|
||
| kyc / cip | Evidence Source + Assurance | FinCEN, FATF | Regulated commercial identity onboarding. |
|
||
```
|
||
|
||
### evidence
|
||
|
||
Frozen source: [terminology/TerminologyInventory.md](../source/terminology/TerminologyInventory.md) lines 105–105; SHA-256 `f6a2c13eb05ca9f7299d1e704815b2dbf0a2d0c8ca75a032bc4aaca087b28b86`.
|
||
Historical wording; this is not a current model definition.
|
||
|
||
```text
|
||
| evidence | Evidence Source | NIST proofing, entity resolution, SSF | Supports claims and synonymity. SSF SET = event Evidence Source. |
|
||
```
|
||
|
||
### policy
|
||
|
||
Frozen source: [terminology/TerminologyInventory.md](../source/terminology/TerminologyInventory.md) lines 117–117; SHA-256 `13bcf330fb1989abf5ba4d7c673d2c3a646480236f81792abadb74afa660b983`.
|
||
Historical wording; this is not a current model definition.
|
||
|
||
```text
|
||
| policy | Authorization Projection | Cedar, Cerbos | Rule artifact; downstream of canon model. |
|
||
```
|
||
|
||
### contextual tuple
|
||
|
||
Frozen source: [terminology/TerminologyInventory.md](../source/terminology/TerminologyInventory.md) lines 138–138; SHA-256 `5b1c5f8c2795fc54d61f319bd4c6238538588fa4026e779d0ed615e998133218`.
|
||
Historical wording; this is not a current model definition.
|
||
|
||
```text
|
||
| contextual tuple | Delegation context | OpenFGA | Ephemeral authz fact at check time. |
|
||
```
|