Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a070b5-4994-7271-bd8b-7c3dbcedec4b
9.6 KiB
itc-evid provenance reading index
Historical input only. Current canon and ADR-006 override superseded assertions.
- research/CorpusIndex.md — d110cd1f6653.
- research/README.md — 1ab93b1176ac.
- research/ResearchSeed.md — 1e432ff04d17.
- research/authentication-federation/nist-800-63-4.md — 8697b739399c.
- research/authentication-federation/oidc-core-subject-identifiers.md — e1a0bf8a2754.
- research/authentication-federation/saml-nameid-federation.md — 394457cf75d2.
- research/authentication-federation/shared-signals-caep-risc.md — 7303fd449a83.
- research/commercial-identity/beneficial-ownership-kyc-boi.md — 602aad062291.
- research/commercial-identity/commercial-identity-nuance-settlement.md — cabb54601ee7.
- research/commercial-identity/commercial-identity-synthesis.md — ac70ecdb2046.
- research/commercial-identity/commercial-trust-binding-theory.md — fc7be6f0641b.
- research/commercial-identity/crm-pipeline-commitment-threshold.md — 459828097e09.
- research/commercial-identity/duns-commercial-credit-identity.md — b33b789b047f.
- research/commercial-identity/eidas-eudi-legal-person-wallet.md — be8b05990cd0.
- research/commercial-identity/kyc-aml-commercial-identity-binding.md — 5d3f63465cd7.
- research/commercial-identity/legal-person-agency-contract.md — c3110cc62b49.
- research/commercial-identity/lei-gleif-legal-entity-identifier.md — ef2ba7156f6d.
- research/commercial-identity/payment-credential-pci-boundary.md — bcacaee7090c.
- research/commercial-identity/registry-identifier-subtypes.md — 1a621787a869.
- research/commercial-identity/reputation-assurance-gradient.md — 0c992d05657d.
- research/commercial-identity/salesforce-crm-commercial-record.md — 52bf8c8dbbd7.
- research/entity-resolution-privacy/deterministic-vs-probabilistic-matching.md — 12585f844728.
- research/entity-resolution-privacy/gdpr-pseudonymization.md — de2bfcf7f52b.
- research/entity-resolution-privacy/synonymity-assertions.md — 6ba40ec37221.
- research/identity-provisioning/keycloak-organizations.md — 09c43cdc9ecf.
- research/identity-provisioning/ldap-rfc4519-inetorgperson-rfc2798.md — c3f3323a3f25.
- research/identity-provisioning/ory-kratos-keto.md — 5cd12c38f8d3.
- research/identity-provisioning/scim-rfc7643-rfc7644.md — c5c03952ac2f.
- research/identity-provisioning/zitadel-organizations-projects.md — f4b1b6f4cce3.
- research/verifiable-claims/did-core.md — cbe5fd46e093.
- research/verifiable-claims/openid4vc.md — e6fcc0612146.
- research/verifiable-claims/vc-data-model-2.md — dae7bc679c6c.
- scenarios/ScenarioTests.md — 400641667064.
- terminology/TerminologyConflictMap.md — 06c8134a399a.
- terminology/TerminologyInventory.md — 5d22816b0bfe.
Shared terminology and scenario fragments
S12. Weak Identity Match From Imported Data
Frozen source: scenarios/ScenarioTests.md lines 140–150; SHA-256 b5f26ea04922d59bfe1c7dd240a2348e4afc6cc45a257ea5dfbb733e614649d5.
Historical wording; this is not a current model definition.
## S12. Weak Identity Match From Imported Data
Expected representation: source Identity Records linked by a weak Synonymity
Assertion with method, evidence, confidence, scope, and lifecycle state.
Checks:
- Weak match does not merge accounts.
- Consumers can reject or quarantine weak links.
- Evidence source remains visible.
Conflict: Synonymity, Linking, Matching, Merge
Frozen source: terminology/TerminologyConflictMap.md lines 163–177; SHA-256 a714d30d2c1bedfcfe3020fa277c5a6226ec408eebd65efc33aadcba9b825ddf.
Historical wording; this is not a current model definition.
## Conflict: Synonymity, Linking, Matching, Merge
Problem: systems collapse probabilistic matches, verified links, and destructive
merges into one feature.
Source evidence:
- Probabilistic matching → weak assertion (`deterministic-vs-probabilistic-matching.md`)
- OIDC iss+sub binding → strong scoped assertion (`oidc`, `synonymity-assertions` notes)
- Schema.org sameAs = weak web equivalence (`schema-org` note)
- GDPR cross-linking raises identifiability risk (`gdpr-pseudonymization.md`)
- MDM golden record merge = downstream anti-pattern (`deterministic` note)
Canonical stance: synonymity is scoped, evidenced, revocable assertion.
pan / cvv / chd
Frozen source: terminology/TerminologyInventory.md lines 42–42; SHA-256 84eacf96d9ff1a172086a00c1ecf31e94f5b594ee4dce3559e8ccd2525ab6b9c.
Historical wording; this is not a current model definition.
| pan / cvv / chd | Out of canon | PCI DSS | Downstream PCI vault only. |
star rating / review
Frozen source: terminology/TerminologyInventory.md lines 63–63; SHA-256 3dbb10a8ab536c181da9205e3cfb4fae3031e0fd007fb4bb6205bb532e1959f1.
Historical wording; this is not a current model definition.
| star rating / review | Reputation Signal | Yelp, Amazon, App Store | Opinion-tier Evidence Source; weak, gamable. |
arbitration award
Frozen source: terminology/TerminologyInventory.md lines 68–68; SHA-256 5631838512e0e0b5452b591adc1f4f77f380df18cecf4e6164dab0546207ef67.
Historical wording; this is not a current model definition.
| arbitration award | Adjudication Outcome | AAA, ICC, JAMS | Adjudicated-tier dispute result. |
court judgment
Frozen source: terminology/TerminologyInventory.md lines 69–69; SHA-256 ba21ec0155b991faea17beea69f8fbcaa4489f51e522ced3b2ded31fe06f4c3e.
Historical wording; this is not a current model definition.
| court judgment | Adjudication Outcome | courts | Adjudicated-tier enforcement outcome. |
kyc / cip
Frozen source: terminology/TerminologyInventory.md lines 78–78; SHA-256 489f788d80be6f2e796a116a2338e697145669829f355c121e18975dbbfbf13f.
Historical wording; this is not a current model definition.
| kyc / cip | Evidence Source + Assurance | FinCEN, FATF | Regulated commercial identity onboarding. |
evidence
Frozen source: terminology/TerminologyInventory.md lines 105–105; SHA-256 f6a2c13eb05ca9f7299d1e704815b2dbf0a2d0c8ca75a032bc4aaca087b28b86.
Historical wording; this is not a current model definition.
| evidence | Evidence Source | NIST proofing, entity resolution, SSF | Supports claims and synonymity. SSF SET = event Evidence Source. |
policy
Frozen source: terminology/TerminologyInventory.md lines 117–117; SHA-256 13bcf330fb1989abf5ba4d7c673d2c3a646480236f81792abadb74afa660b983.
Historical wording; this is not a current model definition.
| policy | Authorization Projection | Cedar, Cerbos | Rule artifact; downstream of canon model. |
contextual tuple
Frozen source: terminology/TerminologyInventory.md lines 138–138; SHA-256 5b1c5f8c2795fc54d61f319bd4c6238538588fa4026e779d0ed615e998133218.
Historical wording; this is not a current model definition.
| contextual tuple | Delegation context | OpenFGA | Ephemeral authz fact at check time. |