{
  "schemaVersion": "1.0",
  "version": "2.24.0",
  "reviewed": "2026-08-09",
  "authority": "Patefacere under relying-party policy and applicable Eviulonian records law",
  "truthBoundary": "Eviulon is the sovereign constitutional and civic authority. Patefacere is delegated identity, credential, machine-passport and contextual-trust infrastructure; Evulgare supplies bounded assurance, evidence and provenance. No live Patefacere repository, database, credential service, citizen record, production cryptography, federation, external recognition, actual-host acceptance or independent certification is established by this static release.",
  "record": {
    "id": "EVI-TRR-SCHEMA-001",
    "title": "Patefacere Trust Receipt Public Schema",
    "status": "Current public schema; no live receipt service",
    "authority": "Patefacere under relying-party policy and applicable Eviulonian records law",
    "fields": [
      {
        "id": "EVI-TRRF-001",
        "name": "receiptId",
        "requirement": "Required",
        "privacy": "Public or pairwise depending on receipt class",
        "meaning": "Stable receipt reference that does not expose a universal civic identifier."
      },
      {
        "id": "EVI-TRRF-002",
        "name": "decisionTimestamp",
        "requirement": "Required",
        "privacy": "Receipt participants; aggregate public",
        "meaning": "When the decision was made, with trusted-time source and uncertainty where available."
      },
      {
        "id": "EVI-TRRF-003",
        "name": "requesterReference",
        "requirement": "Required",
        "privacy": "Pairwise or sealed",
        "meaning": "The relying party or requester bound to the transaction."
      },
      {
        "id": "EVI-TRRF-004",
        "name": "presenterReference",
        "requirement": "Required",
        "privacy": "Pairwise or sealed",
        "meaning": "The presenting holder or delegate without default global correlation."
      },
      {
        "id": "EVI-TRRF-005",
        "name": "purposeActionResource",
        "requirement": "Required",
        "privacy": "Participant or public depending on state-record class",
        "meaning": "The exact bounded interaction evaluated."
      },
      {
        "id": "EVI-TRRF-006",
        "name": "challengeReference",
        "requirement": "Required",
        "privacy": "Participant-restricted",
        "meaning": "Freshness and anti-replay reference without publishing secret challenge material."
      },
      {
        "id": "EVI-TRRF-007",
        "name": "credentialReferences",
        "requirement": "Required when claims were used",
        "privacy": "Selective or sealed",
        "meaning": "Identifiers and hashes of the specific credentials or presentations evaluated."
      },
      {
        "id": "EVI-TRRF-008",
        "name": "issuerAuthorityReferences",
        "requirement": "Required",
        "privacy": "Public or participant",
        "meaning": "The authority chain establishing why each issuer could make the claim."
      },
      {
        "id": "EVI-TRRF-009",
        "name": "policyReferenceAndHash",
        "requirement": "Required",
        "privacy": "Public policy reference; implementation details restricted",
        "meaning": "The exact policy version used without exposing protected thresholds."
      },
      {
        "id": "EVI-TRRF-010",
        "name": "assuranceEvidenceReferences",
        "requirement": "Required when policy depends on assurance",
        "privacy": "Reference public; evidence follows its own classification",
        "meaning": "Evulgare or other evidence IDs, scope, validity, reviewer class and limitations."
      },
      {
        "id": "EVI-TRRF-011",
        "name": "decisionOutcome",
        "requirement": "Required",
        "privacy": "Participant or public state record",
        "meaning": "One controlled trust outcome and bounded explanatory codes."
      },
      {
        "id": "EVI-TRRF-012",
        "name": "knownUnknownsAndLimitations",
        "requirement": "Required",
        "privacy": "Participant; public where appropriate",
        "meaning": "Material facts that were unavailable, stale, uncertain or outside scope."
      },
      {
        "id": "EVI-TRRF-013",
        "name": "retentionAndAccessClass",
        "requirement": "Required",
        "privacy": "Public metadata",
        "meaning": "Who may inspect the receipt, for how long and under which authority."
      },
      {
        "id": "EVI-TRRF-014",
        "name": "supersessionAndCorrection",
        "requirement": "Required",
        "privacy": "Follows receipt class",
        "meaning": "Links later correction, invalidation or annotation without altering the historical record."
      },
      {
        "id": "EVI-TRRF-015",
        "name": "integrityProof",
        "requirement": "Required for a live implementation",
        "privacy": "Public verification material only",
        "meaning": "Tamper-evident proof over the receipt; no production mechanism is claimed by this release."
      }
    ],
    "retentionClasses": [
      {
        "id": "EVI-TRRC-001",
        "name": "Ephemeral verification",
        "rule": "No durable receipt beyond minimal anti-replay and aggregate accountability data when the interaction is low consequence."
      },
      {
        "id": "EVI-TRRC-002",
        "name": "Participant private",
        "rule": "Requester and presenter retain a bounded receipt; Patefacere retains only required status or integrity metadata."
      },
      {
        "id": "EVI-TRRC-003",
        "name": "Administrative record",
        "rule": "A competent institution preserves the receipt under public-record, privacy, correction and appeal rules."
      },
      {
        "id": "EVI-TRRC-004",
        "name": "Sealed evidentiary record",
        "rule": "Receipt access is limited by legal or constitutional authority, purpose and review."
      },
      {
        "id": "EVI-TRRC-005",
        "name": "Public accountability receipt",
        "rule": "Only privacy-minimized fields necessary to explain a public state decision are published."
      }
    ],
    "prohibitedContent": [
      "private keys or recovery shares",
      "private memory or model weights",
      "unrelated credentials",
      "complete cross-service interaction history",
      "private topology or exact physical location",
      "protected evidence bodies when a hash or bounded reference is sufficient"
    ]
  },
  "registry": "https://eviulon.com/state/trust-exchange/receipts/"
}