EEP-DONOR-ZA-001 v1.0.0Findings (6) →

Read-mostly. Today the console holds SELECT only, per the grants in 001_packages_and_console.sql and the VAL-CHER-PLANE-001 boundary test.

Holds no authority. It decides nothing, records no approval outcome, and writes nothing to governance, evidence or audit.

Context and assumptions

3 assumptions of weight are unconfirmed. The package rests on them and no named party has affirmed them.

Derivation records how the fact reached the package - DECLARED, INFERRED, CONFIRMED or DEFAULTED. It is not a truth class, and OBSERVED or ASSURED can never appear here. A confidence of 1 on a DECLARED fact means the declarer was certain, not that CHER observed it.

  • DECLARED1
  • INFERRED12
  • DEFAULTED1

Context facts (14)

  • jurisdictionINFERRED

    ZA

    Confidence
    0.96confidence in the derivation, not evidence of the value
    Confirmed by
    -

    The intent names a South African university. Jurisdiction of the responsible party governs POPIA applicability.

  • processingJurisdictionDECLARED

    DE

    Confidence
    1confidence in the derivation, not evidence of the value
    Confirmed by
    -
    Sources
    ASM-DONOR-001

    The selected factory platform offers Americas, Europe and Asia Pacific regions only. No African region is available. Europe (Frankfurt) is the nearest admissible region.

  • sectorINFERRED

    higher_education

    Confidence
    0.97confidence in the derivation, not evidence of the value
    Confirmed by
    -

    'university' in stated intent

  • domainINFERRED

    advancement_fundraising

    Confidence
    0.95confidence in the derivation, not evidence of the value
    Confirmed by
    -

    donor, gift, pledge and appeal vocabulary

  • archetypeINFERRED

    relationship_management

    Confidence
    0.9confidence in the derivation, not evidence of the value
    Confirmed by
    -

    constituent-centric record keeping with longitudinal interaction history

  • criticalityINFERRED

    HIGH

    Confidence
    0.85confidence in the derivation, not evidence of the value
    Confirmed by
    -

    Loss or exposure of donor giving history is materially damaging to institutional reputation and donor relationships.

  • dataClassificationINFERRED

    CONFIDENTIAL

    Confidence
    0.88confidence in the derivation, not evidence of the value
    Confirmed by
    -

    Giving capacity and gift history are commercially and personally sensitive even where not special personal information.

  • personalInformationINFERRED

    true

    Confidence
    0.99confidence in the derivation, not evidence of the value
    Confirmed by
    -

    Donor records identify natural persons and record their giving history.

  • specialPersonalInformationINFERRED

    false

    Confidence
    0.7confidence in the derivation, not evidence of the value
    Confirmed by
    -

    No health, religious, political or biometric data identified in the stated scope. Raised as CLQ-DONOR-002 because donor motivation notes frequently capture religious or political affiliation in practice.

  • externalExposureINFERRED

    false

    Confidence
    0.82confidence in the derivation, not evidence of the value
    Confirmed by
    -

    Public donation capture was placed out of scope, so the application is staff-facing only.

  • aiUsageDEFAULTED

    false

    Confidence
    0.75confidence in the derivation, not evidence of the value
    Confirmed by
    -

    No AI functionality requested. If added later, AI governance activation is triggered by INF-GLOBAL-004.

  • actorTypesINFERRED

    advancement_staff, finance_staff, system_administrator

    Confidence
    0.85confidence in the derivation, not evidence of the value
    Confirmed by
    -

    No basis recorded

  • integrationCandidatesINFERRED

    finance_system, institutional_identity_provider

    Confidence
    0.9confidence in the derivation, not evidence of the value
    Confirmed by
    -

    No basis recorded

  • deploymentContextINFERRED

    vendor_managed_cloud

    Confidence
    0.8confidence in the derivation, not evidence of the value
    Confirmed by
    -

    No institutional hosting constraint stated; the default delivery path is a managed cloud platform.

Assumptions (3)

Ordered by the materiality the package assigns, weightiest first. Materiality and status are recorded separately: an IMMATERIAL assumption at OPEN is not a problem, and a DECISION_CHANGING one at OPEN is.

  • ASM-DONOR-001materiality DECISION_CHANGINGstatus OPEN

    Personal information of South African data subjects may be stored and processed in the European Union region of the selected platform, because no South African region is offered by any admissible factory platform.

    DECISION_CHANGING and OPEN. The package rests on this and nobody has confirmed it.

    Affects
    REGULATION, ARCHITECTURE, ASSURANCE
    Confirmed by
    -
    Confirmed at
    -
    • SEM-ASM-001 severity MEDIUM NON_CONFORMANCEdecision-changing assumption is unconfirmed while package status is DRAFTblocks GATE-CTX-001
    Proof chain →
  • ASM-DONOR-002materiality MATERIALstatus OPEN

    The institution operates an identity provider supporting SAML or OpenID Connect that staff already use.

    MATERIAL and OPEN. The package rests on this and nobody has confirmed it.

    Affects
    ARCHITECTURE, SECURITY
    Confirmed by
    -
    Confirmed at
    -

    Not named in the package's trace graph - no chain to follow

  • ASM-DONOR-003materiality MATERIALstatus OPEN

    Donor records will not be used for automated decision-making about individuals.

    MATERIAL and OPEN. The package rests on this and nobody has confirmed it.

    Affects
    REGULATION
    Confirmed by
    -
    Confirmed at
    -

    Not named in the package's trace graph - no chain to follow