Context and assumptions (3) →Findings (9) →

Read-mostly. Today the console holds SELECT only, per the grants in 001_packages_and_console.sql and the VAL-CHER-PLANE-001 boundary test.

Holds no authority. It decides nothing, records no approval outcome, and writes nothing to governance, evidence or audit.

EEP-DONOR-ZA-001 · v1.0.0

Status: DRAFT
Version: 1.0.0
Architecture style: MODULAR_MONOLITH
Knowledge snapshot - the basis this package is judged against: KS-2d4a1d596a27c2e1

Business intent

Build a donor management system for a South African university so our advancement office can track alumni donors, record gifts and pledges, run appeal campaigns and report to the finance office.

Governance gates

A gate is a definition. Its state is what one run made of it, so every state below is read from that gate's outcome and carries the source it came from.

Where these gate states come from

PACKAGE_FALLBACK

At least one state below is the package's own assertion as issued, not something a run observed. It carries no run, no observation time and no verification anyone executed.

Outcomes: 4
Runs: none
Gates with no outcome: 0
Fixture declares: PACKAGE_FALLBACK

▮ PRE_DISPATCH

Evaluated before the package may be dispatched. A blocked gate here stops the work.

GATE-GEO-001

Production processing geography

blockingBLOCKED

Every foreign processing path for personal information rests on an established section 72(1) ground with accepted supporting evidence.

PACKAGE_FALLBACKno run · no observation time

Not observed. This is the package's own gate state as issued: no run, no observation time, and no verification anyone executed.

No verification record. Nothing was executed to reach this state.

Blocked by 5

XB-DONOR-001
XB-DONOR-002
XB-DONOR-003
XB-DONOR-004
DEC-DONOR-002

SEM-GEO-001severity CRITICALRISK_CONDITION
personal information in 'DA-DONOR-PROFILE' is processed in DE with no established transfer ground under POPIA s72(1)
Subject
XB-DONOR-001
Location
privacyRegulatoryContract/XB-DONOR-001
SEM-GEO-001severity CRITICALRISK_CONDITION
personal information in 'DA-GIFT-TRANSACTION' is processed in DE with no established transfer ground under POPIA s72(1)
Subject
XB-DONOR-002
Location
privacyRegulatoryContract/XB-DONOR-002
SEM-GEO-001severity CRITICALRISK_CONDITION
personal information in 'DA-CONSENT-PREFERENCE' is processed in DE with no established transfer ground under POPIA s72(1)
Subject
XB-DONOR-003
Location
privacyRegulatoryContract/XB-DONOR-003
SEM-GEO-001severity CRITICALRISK_CONDITION
personal information in 'DA-AUDIT-EVENT' is processed in DE with no established transfer ground under POPIA s72(1)
Subject
XB-DONOR-004
Location
privacyRegulatoryContract/XB-DONOR-004
SEM-GEO-002severity CRITICALNON_CONFORMANCE
personal-information asset is processed in US via 'subprocessor:Transactional email provider' (home jurisdiction ZA) with no cross-border transfer record at all
Subject
DA-DONOR-PROFILE
Location
dataContract/DA-DONOR-PROFILE/processingGeography/subprocessor:Transactional email provider

GATE-CTX-001

Context readiness

blockingBLOCKED

No decision-changing assumption remains unconfirmed.

PACKAGE_FALLBACKno run · no observation time

Not observed. This is the package's own gate state as issued: no run, no observation time, and no verification anyone executed.

No verification record. Nothing was executed to reach this state.

Blocked by 2

ASM-DONOR-001
ASM-ADAPT-002

SEM-ASM-001severity MEDIUMNON_CONFORMANCE
decision-changing assumption is unconfirmed while package status is DRAFT
Subject
ASM-DONOR-001
Location
solutionContextProfile/assumptions/ASM-DONOR-001

▯ POST_EXECUTION

Evaluated after execution, against the running system. Open is the normal state until validation runs.

GATE-SEC-001

Tenant and authorisation assurance

blockingOPEN

VAL-TENANT-001 and VAL-AUTHZ-001 pass under independent execution.

PACKAGE_FALLBACKno run · no observation time

Not observed. This is the package's own gate state as issued: no run, no observation time, and no verification anyone executed.

No verification record. Nothing was executed to reach this state.

GATE-REL-001

Release recommendation

blockingOPEN

All blocking validation rules pass or carry an authorised, time-bound exception, and every blocking gate has passed.

PACKAGE_FALLBACKno run · no observation time

Not observed. This is the package's own gate state as issued: no run, no observation time, and no verification anyone executed.

No verification record. Nothing was executed to reach this state.

Findings that block no gate

SEM-KB-001severity MEDIUMASSURANCE_DEBT
the envelope binds this package to KS-2d4a1d596a27c2e1 and knowledgeBinding binds it to KS-2026-08-27-0001; a package binds to one immutable snapshot and this one names two
Subject
EEP-DONOR-ZA-001
Location
knowledgeBinding/snapshotId
Proof chain →
SEM-KB-002severity MEDIUMASSURANCE_DEBT
recorded as considered and rejected, and not present in 05_Knowledge_Packs, which is where this check looked; a pack that was not in the corpus cannot have been considered, and INV-CHER-001 rests on this field being evidence rather than assertion
Subject
PACK-AI-GOVERNANCE-001
Location
knowledgeBinding/packsConsideredAndRejected
Proof chain →
SEM-KB-002severity MEDIUMASSURANCE_DEBT
recorded as considered and rejected, and not present in 05_Knowledge_Packs, which is where this check looked; a pack that was not in the corpus cannot have been considered, and INV-CHER-001 rests on this field being evidence rather than assertion
Subject
PACK-PCI-DSS-001
Location
knowledgeBinding/packsConsideredAndRejected
Proof chain →