Read-mostly. Today the console holds SELECT only, per the grants in 001_packages_and_console.sql and the VAL-CHER-PLANE-001 boundary test.
Holds no authority. It decides nothing, records no approval outcome, and writes nothing to governance, evidence or audit.
Context and assumptions
3 assumptions of weight are unconfirmed. The package rests on them and no named party has affirmed them.
Derivation records how the fact reached the package - DECLARED, INFERRED, CONFIRMED or DEFAULTED. It is not a truth class, and OBSERVED or ASSURED can never appear here. A confidence of 1 on a DECLARED fact means the declarer was certain, not that CHER observed it.
- DECLARED1
- INFERRED12
- DEFAULTED1
Context facts (14)
- jurisdictionINFERRED
ZA
- Confidence
- 0.96confidence in the derivation, not evidence of the value
- Confirmed by
- -
The intent names a South African university. Jurisdiction of the responsible party governs POPIA applicability.
- processingJurisdictionDECLARED
DE
- Confidence
- 1confidence in the derivation, not evidence of the value
- Confirmed by
- -
- Sources
- ASM-DONOR-001
The selected factory platform offers Americas, Europe and Asia Pacific regions only. No African region is available. Europe (Frankfurt) is the nearest admissible region.
- sectorINFERRED
higher_education
- Confidence
- 0.97confidence in the derivation, not evidence of the value
- Confirmed by
- -
'university' in stated intent
- domainINFERRED
advancement_fundraising
- Confidence
- 0.95confidence in the derivation, not evidence of the value
- Confirmed by
- -
donor, gift, pledge and appeal vocabulary
- archetypeINFERRED
relationship_management
- Confidence
- 0.9confidence in the derivation, not evidence of the value
- Confirmed by
- -
constituent-centric record keeping with longitudinal interaction history
- criticalityINFERRED
HIGH
- Confidence
- 0.85confidence in the derivation, not evidence of the value
- Confirmed by
- -
Loss or exposure of donor giving history is materially damaging to institutional reputation and donor relationships.
- dataClassificationINFERRED
CONFIDENTIAL
- Confidence
- 0.88confidence in the derivation, not evidence of the value
- Confirmed by
- -
Giving capacity and gift history are commercially and personally sensitive even where not special personal information.
- personalInformationINFERRED
true
- Confidence
- 0.99confidence in the derivation, not evidence of the value
- Confirmed by
- -
Donor records identify natural persons and record their giving history.
- specialPersonalInformationINFERRED
false
- Confidence
- 0.7confidence in the derivation, not evidence of the value
- Confirmed by
- -
No health, religious, political or biometric data identified in the stated scope. Raised as CLQ-DONOR-002 because donor motivation notes frequently capture religious or political affiliation in practice.
- externalExposureINFERRED
false
- Confidence
- 0.82confidence in the derivation, not evidence of the value
- Confirmed by
- -
Public donation capture was placed out of scope, so the application is staff-facing only.
- aiUsageDEFAULTED
false
- Confidence
- 0.75confidence in the derivation, not evidence of the value
- Confirmed by
- -
No AI functionality requested. If added later, AI governance activation is triggered by INF-GLOBAL-004.
- actorTypesINFERRED
advancement_staff, finance_staff, system_administrator
- Confidence
- 0.85confidence in the derivation, not evidence of the value
- Confirmed by
- -
No basis recorded
- integrationCandidatesINFERRED
finance_system, institutional_identity_provider
- Confidence
- 0.9confidence in the derivation, not evidence of the value
- Confirmed by
- -
No basis recorded
- deploymentContextINFERRED
vendor_managed_cloud
- Confidence
- 0.8confidence in the derivation, not evidence of the value
- Confirmed by
- -
No institutional hosting constraint stated; the default delivery path is a managed cloud platform.
Assumptions (3)
Ordered by the materiality the package assigns, weightiest first. Materiality and status are recorded separately: an IMMATERIAL assumption at OPEN is not a problem, and a DECISION_CHANGING one at OPEN is.
- ASM-DONOR-001materiality DECISION_CHANGINGstatus OPEN
Personal information of South African data subjects may be stored and processed in the European Union region of the selected platform, because no South African region is offered by any admissible factory platform.
DECISION_CHANGING and OPEN. The package rests on this and nobody has confirmed it.
- Affects
- REGULATION, ARCHITECTURE, ASSURANCE
- Confirmed by
- -
- Confirmed at
- -
- SEM-ASM-001 severity MEDIUM NON_CONFORMANCEdecision-changing assumption is unconfirmed while package status is DRAFTblocks GATE-CTX-001
- ASM-DONOR-002materiality MATERIALstatus OPEN
The institution operates an identity provider supporting SAML or OpenID Connect that staff already use.
MATERIAL and OPEN. The package rests on this and nobody has confirmed it.
- Affects
- ARCHITECTURE, SECURITY
- Confirmed by
- -
- Confirmed at
- -
Not named in the package's trace graph - no chain to follow
- ASM-DONOR-003materiality MATERIALstatus OPEN
Donor records will not be used for automated decision-making about individuals.
MATERIAL and OPEN. The package rests on this and nobody has confirmed it.
- Affects
- REGULATION
- Confirmed by
- -
- Confirmed at
- -
Not named in the package's trace graph - no chain to follow