← Packages ← Package view

Findings · EEP-DONOR-ZA-001 · v1.0.0

Status DRAFT · Knowledge basis KS-2d4a1d596a27c2e1

Read-mostly. Today the console holds SELECT only, per the grants in 001_packages_and_console.sql and the VAL-CHER-PLANE-001 boundary test.

Holds no authority. It decides nothing, records no approval outcome, and writes nothing to governance, evidence or audit.

Verdict at a glance

▲ BLOCKED - 2 gates blocked by 6 findings

Each blocked gate is listed below with every finding raised against it. Nothing here is summarised away.

5 CRITICAL
4 MEDIUM

Blocks gate · GATE-GEO-001

Production processing geography

PRE_DISPATCH · blockingBLOCKED5 findings

Every foreign processing path for personal information rests on an established section 72(1) ground with accepted supporting evidence.

SEM-GEO-001severity CRITICALRISK_CONDITION
personal information in 'DA-DONOR-PROFILE' is processed in DE with no established transfer ground under POPIA s72(1)
Subject
XB-DONOR-001
Location
privacyRegulatoryContract/XB-DONOR-001
Proof chain →
SEM-GEO-001severity CRITICALRISK_CONDITION
personal information in 'DA-GIFT-TRANSACTION' is processed in DE with no established transfer ground under POPIA s72(1)
Subject
XB-DONOR-002
Location
privacyRegulatoryContract/XB-DONOR-002
Proof chain →
SEM-GEO-001severity CRITICALRISK_CONDITION
personal information in 'DA-CONSENT-PREFERENCE' is processed in DE with no established transfer ground under POPIA s72(1)
Subject
XB-DONOR-003
Location
privacyRegulatoryContract/XB-DONOR-003
Proof chain →
SEM-GEO-001severity CRITICALRISK_CONDITION
personal information in 'DA-AUDIT-EVENT' is processed in DE with no established transfer ground under POPIA s72(1)
Subject
XB-DONOR-004
Location
privacyRegulatoryContract/XB-DONOR-004
Proof chain →
SEM-GEO-002severity CRITICALNON_CONFORMANCE
personal-information asset is processed in US via 'subprocessor:Transactional email provider' (home jurisdiction ZA) with no cross-border transfer record at all
Subject
DA-DONOR-PROFILE
Location
dataContract/DA-DONOR-PROFILE/processingGeography/subprocessor:Transactional email provider
Proof chain →

Blocks gate · GATE-CTX-001

Context readiness

PRE_DISPATCH · blockingBLOCKED1 finding

No decision-changing assumption remains unconfirmed.

SEM-ASM-001severity MEDIUMNON_CONFORMANCE
decision-changing assumption is unconfirmed while package status is DRAFT
Subject
ASM-DONOR-001
Location
solutionContextProfile/assumptions/ASM-DONOR-001
Assumption →Proof chain →

Blocks no gate

Non-blocking findings

3 findings

SEM-KB-001severity MEDIUMASSURANCE_DEBT
the envelope binds this package to KS-2d4a1d596a27c2e1 and knowledgeBinding binds it to KS-2026-08-27-0001; a package binds to one immutable snapshot and this one names two
Subject
EEP-DONOR-ZA-001
Location
knowledgeBinding/snapshotId
Proof chain →
SEM-KB-002severity MEDIUMASSURANCE_DEBT
recorded as considered and rejected, and not present in 05_Knowledge_Packs, which is where this check looked; a pack that was not in the corpus cannot have been considered, and INV-CHER-001 rests on this field being evidence rather than assertion
Subject
PACK-AI-GOVERNANCE-001
Location
knowledgeBinding/packsConsideredAndRejected
Proof chain →
SEM-KB-002severity MEDIUMASSURANCE_DEBT
recorded as considered and rejected, and not present in 05_Knowledge_Packs, which is where this check looked; a pack that was not in the corpus cannot have been considered, and INV-CHER-001 rests on this field being evidence rather than assertion
Subject
PACK-PCI-DSS-001
Location
knowledgeBinding/packsConsideredAndRejected
Proof chain →