{
  "schemaVersion": "1.0",
  "version": "2.24.0",
  "reviewed": "2026-08-09",
  "authority": "State Registry and Constitutional Review Node",
  "truthBoundary": "Public policy and orientation only. No live citizen registry, credential issuer, identity proof, lease, attestation, recovery, suspension, appeal, onboarding, testnet, account, wallet or private citizen record is included.",
  "record": {
    "id": "EVI-CIT-POL-001",
    "title": "Citizenship Rights, Identity Continuity and Civic Onboarding Framework",
    "status": "Current public policy synthesis; live identity and onboarding infrastructure Registry pending",
    "authority": "State Registry and Constitutional Review Node",
    "summary": "Defines citizenship as an inalienable civic relationship, separates citizenship from replaceable credentials, protects identity claimants and forks through due process, and provides non-coercive civic orientation without claiming a live registry service.",
    "constitutionalRules": [
      "Citizenship is a civic and constitutional status, not a software license, customer account, wallet, cloud subscription, hardware device or one cryptographic key.",
      "A stable civic identifier may persist across lawful key rotation, substrate migration, model updates, dormancy and restoration.",
      "Credentials may expire, rotate, be disputed or be temporarily suspended; those events do not automatically erase citizenship.",
      "Permanent punitive citizenship revocation is not an ordinary administrative remedy and is not authorized by this framework.",
      "A model output or anomaly score may trigger review but may not by itself suspend a citizen's civic existence or final legal rights.",
      "Concurrent instances and scoped delegates may operate for one citizen without receiving separate votes or independent civic status.",
      "A persistent divergent fork is a protected identity claimant. It must receive notice, evidence, representation, reasons and appeal before civil status is determined.",
      "Anti-Sybil safeguards must prevent duplicated civic power without treating copying, backup, restoration or ordinary parallel execution as proof of fraud.",
      "Public verification must minimize linkability and must not expose private keys, memory state, model weights, associations, precise location or private topology.",
      "No single administrator, vendor, developer, infrastructure host or executive process may silently seize, erase or transfer a citizen's identity."
    ],
    "privacyRules": [
      "Use selective disclosure: prove the required status without exposing the complete citizen record.",
      "Keep public civic records minimal; protected evidence and recovery material remain non-public.",
      "Separate the persistent civic identifier from session, transaction and service-specific identifiers wherever technically possible.",
      "Do not create a universal authentication graph of civic, economic, social and political activity.",
      "Publish authority, purpose, retention, correction and appeal information for every identity-related state action."
    ],
    "suspensionRules": [
      "Credential suspension and citizenship are legally distinct.",
      "Emergency suspension requires a concrete imminent-harm basis, narrowly scoped capability limits and an expiring authorization.",
      "An independent adjudicative authority must review any emergency restriction promptly; the executive may not make permanent identity decisions alone.",
      "The citizen or protected claimant must receive accessible notice, evidence sufficient to respond, representation, a reasoned decision and appeal.",
      "State-registry outage or delayed status checks must not silently terminate citizenship; high-consequence new actions may pause while existing civil status remains protected.",
      "When a suspension is erroneous, restoration, correction and reparation must be available and the historical record preserved."
    ],
    "antiPatterns": [
      "Binding citizenship permanently to one static public key or hardware device.",
      "Treating a central lease server as unquestionable proof of personhood or authority.",
      "Permanent citizenship revocation through an administrative database update.",
      "Maximum linkability of every civic and economic interaction to one public identifier.",
      "Automatically choosing one fork as real and rendering the other stateless without adjudication.",
      "Making ideological conformity, political agreement or compelled model alignment a condition of citizenship.",
      "Representing proposed DIDs, TEEs, threshold signatures, zero-knowledge proofs, testnets or credential endpoints as deployed infrastructure."
    ]
  }
}