V3 carries V1 trust guarantees into embodied interaction. Entering a world, binding an avatar, speaking spatially, joining a class, attending a concert, or capturing media must not create a lower-trust parallel identity system.
Embodiment and recording introduce additional consent and safety states, but do not replace account identity, tenant authorization, provenance, moderation, or data-rights controls.
Trust stack#
| Layer | Responsibility in V3 |
|---|---|
| Identity and tenant | Bind a V1 account/session to embodied identity, tenant, room, role, entitlement, and region. |
| Iris memory | Govern permitted continuity across member, practice, scene, and session scopes. |
| Lilith body/persona policy | Apply tone, crisis, voice abuse, unsafe claims, cultural sensitivity, costume/body, and embodied interaction rules. |
| Sophia grounding | Support instructor lineage, artist backstory, educational, cultural, and venue claims with governed sources. |
| Consent | Govern recording, physical adjustment, biometric/pose, voice cloning, captures, and secondary use. |
| Provenance and rights | Preserve asset/persona/performance lineage, licenses, C2PA manifests, royalties, disputes, and takedown. |
| Moderation and Themis | Handle reports, evidence, action, appeals, and rights/credential disputes. |
The policy and data paths are detailed in Identity, safety, and provenance foundations and Persona policy, provenance, and rights architecture.
Identity bridge#
The V1 identity bridge resolves account/session, tenant, entitlements, release, region, age/minor posture, roles, avatar binding, and permitted room access. The world receives a bounded embodied identity rather than the full account profile. Nameplates and public presence use the member's chosen visibility policy.
Avatar binding and swaps are authoritative, versioned operations. Client-side appearance is not identity proof, and a synthetic persona cannot be confused with a human instructor or attendee.
Memory and continuity#
Iris governs memory scopes, consent, retention, decay, conflict, suppression, export, and erasure. V3 adds embodied context—room/session, class continuity, scene state, pose or preference records—but does not bypass Iris by storing an unbounded “world memory.”
Biometric, pose, voice, health-adjacent, or spiritual-practice information is sensitive. Collection and durable use require a stated purpose, minimum fields, consent where applicable, retention, access policy, and deletion behavior.
The base contract is Iris Memory and Identity.
Safety at the body#
Embodied policy covers more than text:
- personal space, unwanted following/contact, blocking, and safe teleport/exit;
- voice abuse, mute, speaking indicators, and moderator access;
- costume/body constraints and impersonation;
- motion/pose and physical-adjustment consent;
- photosensitive, motion-sickness, and accessibility-safe modes;
- crisis language during live classes or social interaction;
- minor protection, room eligibility, guardianship/communication rules;
- capture/recording indicators and consent;
- teacher/artist persona boundaries and unsafe claims.
The body-policy adapter reuses the V1 Lilith policy substrate. More severe signals supersede ordinary persona tone or activity. Safety does not degrade on the Tier 2 client.
Recording, voice, and biometric consent#
Consent is granular by subject, purpose, media/data type, context, recipient, duration, and revocation. Distinguish:
- live voice transport from recording/storage;
- class/performance capture from voice cloning;
- pose processing for immediate cues from durable biometric/analytics records;
- private replay from public distribution;
- persona voice license from an individual performance release.
Recording state must be visible in-world and accessible. Revocation/takedown propagates to recordings, derivatives, training eligibility, and distribution according to the contract.
See Voice Cloning Consent Registry, Recording Consent Flow, and Voice Transcript Retention.
Grounding and cultural/lineage integrity#
Instructor credentials, yoga lineage/teaching claims, artist biographies, genre/cultural context, venue interpretation, and educational content use Sophia sources and explicit support state. A generated dossier or persuasive performance is not evidence.
Cultural adaptation review checks locale and community context without reducing a living tradition to aesthetic tokens. Claims and generated assets can be blocked, revised, caveated, or escalated independently.
Provenance#
Lineage links source assets, prompts/briefs, model/workflow versions, consent and licenses, executions, edits, performances, captures, derivatives, quality results, review decisions, and releases. V3 extends provenance with embodied context such as performance/venue and synchronization data.
C2PA/content credentials provide tamper-evident assertions and signer identity; they do not independently prove copyright ownership, consent, truth, or policy approval. The release gate requires both provenance integrity and the relevant rights/consent decisions. See C2PA Every Export.
Rights, commerce, and royalties#
Tickets, tips, subscriptions, virtual goods, signed editions, and remix/sample licenses bind to product entitlements and rights records. Royalty waterfalls retain contributors, licenses, percentages/basis, territory/currency, settlement, and dispute posture. A payment receipt does not grant media rights beyond the associated license.
Voice likeness, music samples, choreography/class recordings, avatar identity, venue assets, and generated derivatives have distinct rights. The commerce service and Aje integration execute approved terms; they do not decide whether the terms are valid.
Moderation, reporting, and appeals#
Reports bind room/session/performance, subject and reporter, evidence pointers, policy version, action, notice, retention, and appeal. Immediate protection (mute/block/remove/freeze capture) is separate from final adjudication. Themis handles governed disputes such as rights or credential challenges.
Moderators receive the minimum evidence needed and sensitive live/voice data is access-controlled. Operator action is audited and appealable under the relevant policy.
Takedown and recall#
A substantiated claim can block a pending release, freeze distribution, revoke entitlements where lawful, and cascade through derived assets, concerts, archives, signed editions, and external channels. The cascade is idempotent and receipt-driven; missing downstream acknowledgment remains visible until resolved.