← Packages

Read-mostly. Today the console holds SELECT only, per the grants in 001_packages_and_console.sql and the VAL-CHER-PLANE-001 boundary test.

Holds no authority. It decides nothing, records no approval outcome, and writes nothing to governance, evidence or audit.

EEP-DONOR-ZA-001 · v1.1.0

Status
APPROVED
Version
1.1.0
Architecture style
MODULAR_MONOLITH
Knowledge snapshot - the basis this package is judged against
KS-2d4a1d596a27c2e1

Business intent

Build a donor management system for a South African university so our advancement office can track alumni donors, record gifts and pledges, run appeal campaigns and report to the finance office.

Governance gates

A gate is a definition. Its state is what one run made of it, so every state below is read from that gate's outcome and carries the source it came from.

Where these gate states come from

PACKAGE_FALLBACK

At least one state below is the package's own assertion as issued, not something a run observed. It carries no run, no observation time and no verification anyone executed.

Outcomes
4
Runs
none
Gates with no outcome
0
Fixture declares
PACKAGE_FALLBACK

PRE_DISPATCH

Evaluated before the package may be dispatched. A blocked gate here stops the work.

GATE-GEO-001

Production processing geography

blockingPASSED

Every foreign processing path for personal information rests on an established section 72(1) ground with accepted supporting evidence.

PACKAGE_FALLBACKno run · no observation time

Not observed. This is the package's own gate state as issued: no run, no observation time, and no verification anyone executed.

Method
Section 72(1) grounds established for every foreign processing path, with the transactional email subprocessor relocated to the EU and an operator agreement executed.
Environment
Design-time determination against the remediated package.
At
2026-08-27T16:00:00Z
Ran by
person:legal-counsel@donor-institution
Truth class
DECLARED
Does not cover
Grounds are established on paper. No deployed system has been inspected for egress that the package does not declare.
GATE-CTX-001

Context readiness

blockingPASSED

No decision-changing assumption remains unconfirmed.

PACKAGE_FALLBACKno run · no observation time

Not observed. This is the package's own gate state as issued: no run, no observation time, and no verification anyone executed.

Method
Every decision-changing assumption confirmed by a named authority.
Environment
Design-time review of the package.
At
2026-08-27T16:00:00Z
Ran by
person:engineering-lead@cher
Truth class
DECLARED
Does not cover
Covers recorded assumptions only.

POST_EXECUTION

Evaluated after execution, against the running system. Open is the normal state until validation runs.

GATE-SEC-001

Tenant and authorisation assurance

blockingOPEN

VAL-TENANT-001 and VAL-AUTHZ-001 pass under independent execution.

PACKAGE_FALLBACKno run · no observation time

Not observed. This is the package's own gate state as issued: no run, no observation time, and no verification anyone executed.

No verification record. Nothing was executed to reach this state.

GATE-REL-001

Release recommendation

blockingOPEN

All blocking validation rules pass or carry an authorised, time-bound exception, and every blocking gate has passed.

PACKAGE_FALLBACKno run · no observation time

Not observed. This is the package's own gate state as issued: no run, no observation time, and no verification anyone executed.

No verification record. Nothing was executed to reach this state.

Findings that block no gate

This package holds no finding that blocks no gate.