{
  "schemaVersion": "eve.media-project-governance.v1",
  "initiativeId": "eve-sota-gap-closure-2026-09-01",
  "taskId": "14.7",
  "evaluatedOn": "2026-09-15",
  "policy": {
    "notLegalAdvice": true,
    "engineeringMayNotClaimCompliance": true,
    "missingEvidenceDefault": "block",
    "rightsDecisionOwner": "role:rights-reviewer",
    "productionRequiresPreflight": true,
    "publicationRequiresOutputReview": true
  },
  "officialSources": [
    {
      "id": "c2pa-specification",
      "authority": "Coalition for Content Provenance and Authenticity",
      "kind": "technical-specification",
      "url": "https://spec.c2pa.org/specifications/specifications/2.4/specs/C2PA_Specification.html",
      "retrievedOn": "2026-09-15",
      "claimBoundary": "C2PA 2.4 defines manifests, claims, signatures, content bindings, provenance, validation, and AI disclosure. A manifest is a provenance signal, not a rights or truth determination."
    },
    {
      "id": "spdx-license-list",
      "authority": "SPDX",
      "kind": "license-identifier-list",
      "url": "https://spdx.org/licenses/",
      "retrievedOn": "2026-09-15",
      "claimBoundary": "SPDX supplies standardized license identifiers; an identifier alone does not prove ownership, scope, permission, or applicability to a specific material."
    },
    {
      "id": "creative-commons-by",
      "authority": "Creative Commons",
      "kind": "license-deed",
      "url": "https://creativecommons.org/licenses/by/4.0/deed.en",
      "retrievedOn": "2026-09-15",
      "claimBoundary": "CC BY 4.0 demonstrates that attribution and change indications may be conditions of reuse; the deed is not a substitute for the legal code or material-specific rights review."
    },
    {
      "id": "usco-ai-initiative",
      "authority": "United States Copyright Office",
      "kind": "government-study-and-policy-context",
      "url": "https://www.copyright.gov/ai/",
      "retrievedOn": "2026-09-15",
      "claimBoundary": "The Copyright Office AI initiative and its reports provide current policy context on digital replicas, copyrightability, and training; this record does not convert reports into law or assert legal compliance."
    }
  ],
  "requestedUses": ["generation", "publication", "redistribution", "model-training"],
  "materialRoles": [
    "source_asset",
    "project_file",
    "output_license",
    "model_license",
    "dataset_license",
    "likeness_license",
    "voice_license"
  ],
  "controls": [
    {
      "id": "exact-material-license",
      "stage": "both",
      "decision": "block-on-missing-or-conflicting-evidence",
      "requiredEvidence": [
        "exact material reference",
        "active rights receipt",
        "matching licence reference",
        "approved use scope"
      ],
      "sourceBindingRefs": ["rights-contract", "rights-provider"]
    },
    {
      "id": "attribution-obligation",
      "stage": "pre-publication",
      "decision": "block-on-missing-or-conflicting-evidence",
      "requiredEvidence": [
        "attribution-required decision",
        "exact attribution text or record reference"
      ],
      "sourceBindingRefs": ["rights-contract"]
    },
    {
      "id": "redistribution-restriction",
      "stage": "both",
      "decision": "block-on-missing-or-conflicting-evidence",
      "requiredEvidence": ["requested-use declaration", "per-material redistribution permission"],
      "sourceBindingRefs": ["rights-contract"]
    },
    {
      "id": "training-restriction",
      "stage": "both",
      "decision": "block-on-missing-or-conflicting-evidence",
      "requiredEvidence": ["requested-use declaration", "per-material model-training permission"],
      "sourceBindingRefs": ["rights-contract"]
    },
    {
      "id": "likeness-and-voice-consent",
      "stage": "both",
      "decision": "block-on-missing-or-conflicting-evidence",
      "requiredEvidence": [
        "completed likeness and voice scan",
        "exact detected subject references",
        "active scoped consent receipts"
      ],
      "sourceBindingRefs": ["rights-contract", "rights-provider"]
    },
    {
      "id": "generated-media-disclosure",
      "stage": "pre-publication",
      "decision": "block-on-missing-or-conflicting-evidence",
      "requiredEvidence": [
        "synthetic-media decision",
        "attached disclosure",
        "disclosure evidence reference"
      ],
      "sourceBindingRefs": ["rights-contract", "release-gate"]
    },
    {
      "id": "generated-media-provenance",
      "stage": "pre-publication",
      "decision": "block-on-missing-or-conflicting-evidence",
      "requiredEvidence": [
        "content-bound provenance manifest reference",
        "release-gate provenance signal"
      ],
      "sourceBindingRefs": ["rights-contract", "release-gate"]
    },
    {
      "id": "preproduction-rights-review",
      "stage": "pre-production",
      "decision": "block-on-missing-or-conflicting-evidence",
      "requiredEvidence": [
        "approved named rights review",
        "generation use authorization",
        "authoritative provider response before executor invocation"
      ],
      "sourceBindingRefs": ["rights-provider", "autonomy-producer"]
    },
    {
      "id": "prepublication-output-review",
      "stage": "pre-publication",
      "decision": "block-on-missing-or-conflicting-evidence",
      "requiredEvidence": [
        "output-specific rights receipt",
        "publication use authorization",
        "structured artifact-rights bundle"
      ],
      "sourceBindingRefs": ["release-gate", "autonomy-producer"]
    }
  ],
  "sourceBindings": [
    {
      "id": "rights-contract",
      "source": "libs/contracts/src/common/artifact-rights.ts",
      "includes": [
        "ARTIFACT_RIGHTS_POLICY_VERSION = 2",
        "'source_asset'",
        "'project_file'",
        "attributionRequired",
        "redistribution",
        "modelTraining",
        "scanStatus",
        "disclosureStatus",
        "provenanceManifestRef",
        "rightsReview"
      ]
    },
    {
      "id": "release-gate",
      "source": "libs/oshun/generation-control-isis/src/release-gate-model.ts",
      "includes": [
        "artifactRights",
        "evaluateArtifactRightsProofBundle",
        "structured artifact rights are missing",
        "publication"
      ]
    },
    {
      "id": "rights-provider",
      "source": "apps/oshun/bff/src/agentic/autonomy-bindings/artifact-rights-provider.ts",
      "includes": [
        "sourceAssetRefs",
        "projectFileRefs",
        "validateV1ArtifactRightsResponse",
        "requireArtifactRightsBeforeProduction",
        "rights provider is required before creative production"
      ]
    },
    {
      "id": "autonomy-producer",
      "source": "apps/oshun/bff/src/agentic/autonomy-bindings/generation-producer.ts",
      "includes": [
        "requireArtifactRightsBeforeProduction",
        "attachArtifactRights",
        "runMediaBestOfN",
        "runJob"
      ]
    }
  ],
  "limitations": [
    {
      "id": "not-legal-advice",
      "statement": "This is an engineering evidence and fail-closed control record, not legal advice or a conclusion that any licence, consent, copyright, publicity-right, or disclosure obligation is satisfied."
    },
    {
      "id": "authoritative-service-required",
      "statement": "Production remains blocked unless an admitted authoritative rights service supplies exact, current evidence; provider identity and boolean allow flags are insufficient."
    },
    {
      "id": "provenance-is-not-truth",
      "statement": "A C2PA manifest records signed provenance assertions and supports tamper evidence; it does not prove the depicted claim true or independently establish rights."
    },
    {
      "id": "territory-and-contract-review",
      "statement": "Human rights reviewers and counsel remain responsible for territory-specific law, contract interpretation, collective rights, moral rights, publicity rights, and new provider or source terms."
    }
  ]
}