Nishi Family › Compare › Youth Safety: connecting youth worldwide, safe by construction
Nishi Compare · capabilities, evidence and delivery
Youth Safety: connecting youth worldwide, safe by construction
Compare capabilities and delivery evidence. Source discovery, qualification, deployment and accepted outcomes are separate; an open contract names work still to verify.
Nishi CONNECT vs Instagram Teen Accounts and Discord and Roblox and Snapchat and Yubo and Messenger Kids
Overview
The purpose, declared position and evidence coverage of this domain. Source presence and completed acceptance are different measures.
Where we are. MEASURED 2026-09-25 at admission. The youth-safety matrix declares 19 capability rows against six rivals: 12 cite an organ and symbol present in source today (the two-deep wall yw_may_channel, the two-adult room rule room_admit, adult-only lanes ln_min, the issuer-attested age band hmix, content-blind abuse signals abuse_score, fail-closed CSAE reporting sink_fails, sign-up csu_signup_admit, circles ccl_circle_reach, personhood cvh_person_attest, coarse presence ty_active, group roles grp_can_post, sealed messages ce_emit_html) and 7 are watch contracts (the five wave-3 builder symbols jur_rules_for, ysf_peer_may_connect, ast_may_discover, fam_guardian_consent, mfr_report_verify, plus two next steps this board names); the generator re-measures presence on every publish and its count is the figure of record. The September-2026 field protects youth mostly by watching them: Instagram places teens in private Teen Accounts in every country, shows parents who a teen messaged and infers suspected teens regardless of the listed birthday [instagram-teen]; Discord is teen-by-default with a Family Center that shows friends and contacts but never content [discord-teen] [discord-family]; Roblox requires age checks to chat and limits minor and adult chat [roblox-news]; Snapchat keeps location off by default and friends-only [snap-parents]; Yubo verifies every user's age with a face check [yubo]; Messenger Kids lets a parent control contacts and download a child's messages [messengerkids]. No rival on the bar makes a private adult-minor channel impossible, requires two visible adults in a room holding a minor, or proves a person and an age band while storing nothing.
Where we need to go. OPERATOR 2026-09-25 12:50 CDT: youth connect around the world and interact having fun one on one or in groups, with the appropriate safeguards so they stay safe and the platform never carries adults interacting with minors, or minors bullying or sexually approaching minors, while avoiding tracking -- we are not babysitters: clear legal lines that work for every country, responsibility on the person and their parents and family, prevention of stalking and the like, again without becoming babysitters. Design principles held by every rung: safety by construction, not surveillance; the server never reads message content, never geolocates by IP, never builds behavioural profiles and never fingerprints devices; no human or machine monitors conversations; the legal lines are DATA per country sourced from the law read this month, the strictest line where a country is undeclared or unsourced [eu-art28] [ftc-coppa]; structurally prevented: private adult-minor channels (the two-deep wall) [church-gh20], minors reaching minors outside mutual acceptance and adjacent age bands, sexual contact lanes for minors, bullying persistence, stalking (discovery only inside shared circles, a block that hides existence, no location, presence or public friend lists for minors, request throttles, re-contact after a block stopped by the personhood claim rather than tracking).
The unit. 1 u = one measured session-leg (organ plus gate plus live flip), the standing calibration.
Where we are: 12 of 19 rows present in source at admission, 0 real users. The structural walls (two-deep channels and rooms, adult-only lanes), content-blind abuse signals, fail-closed CSAE reporting, sealed messages, private sign-up, circles and personhood are present in source; the per-country legal lines, the peer rule, anti-stalking, guardian consent and franked reports are wave-3 builder contracts in flight; the no-tracking census and the device-side sensitive-image flag are open. Source presence is not a running product: the served connect app wires these libs only when the integrator lands them.
Cost to youth connecting safely by construction: 7 u. Through M1: YS1 legal lines, YS2 the peer rule, YS3 anti-stalking, YS4 guardian consent.
Cost to reports and proof without surveillance: 11.5 u. Through M2: YS5 franked reports, YS6 the no-tracking census, YS7 the device-side sensitive-image flag.
Research bar. Instagram Teen Accounts (private by default, parent insight) is measured on private by default under 16, strictest messaging, parents see who a teen messaged in 7 days. Theirs: every country since 11 June 2025 [instagram-teen]. Ours: YS2 and YS4 match the defaults and add the adjacent-band rule and consent without behavioural inference.
Research bar. Roblox (age-checked chat) is measured on age checks required to chat, minor and adult chat limited. Theirs: January 2026, age assurance kept current August 2026 [roblox-news]. Ours: cvh_person_attest proves the band and stores nothing; yw_may_channel makes the private adult-minor channel impossible.
Research bar. Discord (teen-by-default, Family Center) is measured on guardian sees friends, servers and contacts, never content. Theirs: shipped [discord-family]. Ours: YS4 is the same visibility contract with consent below each country's consent age.
Latest recorded release
2026-09-28 · YS1
YS1'S TABLE NOW DECIDES REAL SIGN-UPS ON THE CONNECT ALPHA (W16 ALPHA-SIGNUP-DOOR, connect.plan rows 1790635100 and 1790636600): the private sign-up door on both register paths of https://nishifamily.com/alpha/connect/ (build bdeb97bc, pid 20441, digest_match 1) runs csu_signup_check_web, whose FIRST, pure step is csu_juris_admit over jur_rules_for and jur_account_decision on knowledge/connect_jurisdictions.conf, before any budget is charged or any challenge spent; production /connect never enters it (staged 0). LIVE over the edge, promoted nx_connect_alpha_signup_gate 23/23 and nx_connect_alpha_device_gate 42/42: D1 a minor declaring no country is refused country_required with no account and no cookie; D7 an AU declarant of 13 to 15 is refused jurisdiction_barred; D8 a US declarant under 13 is refused parental_consent_required by name; neg-control D9 an AU declarant of 16 clears and D10 that account's page shows the under-18 lanes of the two-deep wall with every consent purpose OFF; DD3 on the device path refuses country_required with 403 at respond before any OPRF answer; in a real browser the CM13 journey w16signup_minor stayed on /register reading Under 18, sign-up needs the country or region you live in. OPEN: guardian consent at sign-up is not wired (fam_guardian_consent needs an existing linked member, so PARENTAL_CONSENT refuses rather than holds an account for a guardian); the age band is self-declared (CSU_ATT_SELF), no attested claim source yet; UNDER_MIN is not exercised live. For the LAW-CORE migration (legal.plan row 1790633700) the door is one more consumer of jur_rules_for and jur_account_decision, so it needs a rebuild after the translation, not an edit.
Release entries describe recorded changes; they do not establish that every capability passed evaluation.
17 of 19 capability source symbols found|2 of them authored stronger-claims|2 open|coverage 894/1000|adoption 15 full / 2 partial
Evidence profile — what the gaps on this board actually are
Unstamped. No evidence profile is published for this domain yet: run
nx_swcompare_evidence youthsafety and this section fills itself on the next beat. No numbers are shown, deliberately — a zero-filled profile would read as a board with no gaps, which is the one wrong answer nobody would question.Production map
Follow the dependencies, declared acceptance criteria and recorded priorities. Inspect source binding before treating a rank as executable work.
Ranking source binding: STALE_OR_INVALID_BINDING. Recorded priorities require current acceptance evidence and resource checks before execution.
Recorded ranking withheld
Retained ranking is not bound to the current plan and matrix: STALE_OR_INVALID_BINDING. Historical data remains retained. Refresh the ranking after resolving the input differences. Latest execution outcome is unverified.
Declared roadmap — contract, acceptance, executor, effort
Ladder to SOTA
Two dated targets, and every rung's role toward them. Best in class is the proven, deployed leader today; the frontier is the research edge as of its month. Each target is dated by a sotabar row and judged against the current month by the bar-age ruler (FRESH, ATTESTED with the fallback month named, or refused). Each rung is substrate (what the target's own methods consume), an arm (a sovereign arm that triangulates without competing for the number), a contender (its done-rule is a number against the target) or superseded (kept as capability, retired as a claim), and carries the rungs it stands on.
best-in-class (T-BIC-YOUTH), dated by SB-YS-APPS = 2026-09 ATTESTED. Every youth-safety default the September 2026 field ships -- private by default, strictest messaging, guardian insight into who a minor talks with, age-checked chat, location off -- present on Nishi CONNECT, with no identity evidence kept, no age inferred from behaviour and no message read by anyone but its recipients ref roblox-news
frontier (T-FRONT-STRUCTURE), dated by SB-YS-AGE = 2026-09 UNATTESTED. Youth connect worldwide safe by construction rather than by surveillance: a person and an age band proven with nothing stored, private adult-minor channels structurally impossible, per-country legal lines as data with the strictest applied where unsourced, and no monitor of any conversation ref arxiv-age
frontier (T-FRONT-E2EREPORT), dated by SB-YS-E2EE = 2025-07 UNATTESTED. A report of abuse verifiable inside end-to-end encryption, so safety needs no server that reads messages ref arxiv-franking
| Rung | Closes with | Definition of done (pre-declared) | Executor | Est. |
|---|---|---|---|---|
| Per-country legal lines as data, strictest when undeclared (YS1) | jur_rules_for | jur_rules_for returns the rule row for a declared country (minimum age, parental-consent age, contact rules) read from a conf whose every row names the law it came from and the date it was read, returns the strictest line for an undeclared or unsourced country, and refuses a row without a source; the gate proves a declared country, an undeclared country getting the strictest line, and a sourceless row refused (planted RED then GREEN) | Organ | 2 u |
| Minor-to-minor contact only by mutual acceptance in adjacent age bands (YS2) after YS1 | ysf_peer_may_connect | ysf_peer_may_connect allows two minors only when both accepted and their age bands are adjacent (bands are conf rows), refuses a one-sided request, refuses a non-adjacent pair, never answers for an adult pair (the two-deep wall decides those), and the guardian of each minor can see the friendship; the gate proves each verdict with a neg-control | Organ | 1.5 u |
| Anti-stalking without tracking (YS3) | ast_may_discover | ast_may_discover shows a member only to accounts that share a circle, a block makes the blocker invisible to the blocked account (no profile, presence or search hit), request rates are throttled by a conf rate, no location, presence or friend list of a minor is ever exposed, and re-contact through a new account is refused by the personhood claim, never by an IP or device record; the gate proves each with a planted stalker fixture | Organ | 2 u |
| Guardian consent and visibility without reading a message (YS4) after YS1 | fam_guardian_consent | fam_guardian_consent opens a minor's account and lanes only with guardian consent below the country's consent age read from jur_rules_for, shows the guardian who the minor is connected with and never message content, and withdrawing consent closes the minor's lanes at once; graded against Instagram parent insight and Discord Family Center | Organ | 1.5 u |
| Abuse reports verifiable inside end-to-end encryption (YS5) | mfr_report_verify | mfr_report_verify accepts a reported sealed message only when its franking tag verifies against the reported sender, refuses a forged or altered report, and the server reads no unreported message; the gate proves a real report accepted, a forged one refused and an altered one refused | Organ | 2 u |
| No-tracking census over the connect serving path (YS6) | cnt_tracking_census | A census over the connect serving path refuses any IP geolocation lookup, device fingerprint or cross-session behavioural profile store, names every offender, and is bite-proven with a planted lookup that turns it RED; wired so a build that adds tracking is refused | Organ | 1.5 u |
| Sensitive-image flag for the device, never a server scan (YS7) after YS2 | cmf_device_blur_flag | An attachment sent to or by a minor carries a flag telling the receiving device to blur it until tapped, the server never inspects the image, and an adult lane is unaffected; graded against Discord's blurred sensitive content for teens, where the rivals lead today | Organ | 1 u |
Milestones
| Milestone | Rungs | Cumulative |
|---|---|---|
| M1 · Youth connect safely by construction | YS1,YS2,YS3,YS4 | 7 u |
| M2 · Reports and proof without surveillance | YS5,YS6,YS7 | 11.5 u |
| Rung | Role | Toward | Stands on | Why |
|---|---|---|---|---|
| YS1 | substrate | T-FRONT-STRUCTURE | - | every other rung reads its legal lines; the strictest-line default is what makes the board work in every country |
| YS2 | contender | T-BIC-YOUTH | YS1 | its done-rule is the peer rule itself, graded against Instagram, Discord and Roblox defaults |
| YS3 | contender | T-FRONT-STRUCTURE | - | anti-stalking by structure and personhood, never by tracking, is where no rival on the bar goes |
| YS4 | contender | T-BIC-YOUTH | YS1 | guardian insight without content is what Instagram and Discord ship; ours adds per-country consent |
| YS5 | contender | T-FRONT-E2EREPORT | - | a franked report is the frontier bar itself |
| YS6 | arm | T-FRONT-STRUCTURE | - | the census proves the no-tracking claim rather than competing on a feature |
| YS7 | contender | T-BIC-YOUTH | YS2 | the one capability where rivals lead today, closed without a server scan |
Ladder verdict. LADDERED. Targets, rung roles and bars are counted in the tables below, each partition re-derived beside its total. Bars read STALE against the current month 2026-10.
Ladder verdict, counted (17 rows, more than the 12-row disclosure bar)
| Class | Count | Note |
|---|---|---|
| targets | 3 | sotatarget rows on the plan |
| best in class | 1 | targets whose class is best-in-class, by code |
| frontier | 2 | targets whose class is frontier, by code |
| undated | 0 | targets naming no bar that exists |
| bad class | 0 | targets whose class is neither word |
| duplicate | 0 | target ids an earlier row already carries |
| rungs | 7 | rung rows on the plan |
| placed | 7 | rungs carrying a rungrole row |
| unplaced | 0 | rungs with no role toward any target |
| bad role | 0 | rungrole rows naming a role the ladder does not know |
| bad target | 0 | rungrole rows naming a target no sotatarget row declares |
| rungs, summed | 7 | RECONCILED: the parts sum to the total 7 |
| substrate | 1 | what the target's own methods consume |
| arm | 1 | a sovereign arm that triangulates without competing for the number |
| contender | 5 | its done-rule is a number against the target |
| superseded | 0 | kept as capability, retired as a claim |
| placed, summed | 7 | RECONCILED: the parts sum to the total 7 |
| Class | Count | Note |
|---|---|---|
| bars | 5 | sotabar rows on the plan |
| fresh | 0 | the bar month is the current month |
| attested | 2 | an older bar with a this-month barscan reporting no newer entry |
| stale | 0 | a this-month scan saw a newer month the bar ignores |
| unattested | 3 | nobody looked this month |
| malformed | 0 | a sotabar row missing a field |
| duplicate | 0 | bar ids an earlier row already carries |
| bars, summed | 5 | RECONCILED: the parts sum to the total 5 |
| current month | 2026-10 | the month every bar is judged against |
Treatment verdict. NOT DECLARED. No rung on this board declares its three-step treatment (a treat row naming the MCP row, the API route, the primitive it composes, the workflow that composes it and the agent beat that runs it); the ranker labels every rung TREATMENT-UNDECLARED until it does.
Inspect a rung and its prerequisites
Declared nodes 7. Rank input binding: STALE_OR_INVALID_BINDING. Dependency order is authored. Implementation, acceptance evidence, authority and resource readiness are unverified. No action is recommended or dispatched here.
Plan SHA-256 92e70d44a29d0abacd39e4d193e665919c7c4cf0e37757835a6f23ddcc418171. Target rows 3; role rows 7. Existing risks and release worklog retain their own scope; no node completion is inferred.
Runtime observation coverage: 0 of 7 rungs have current, identity-bound execution observations. Observation may report RED. Accepted completion remains unknown; source presence, qualification and deployment do not establish it.
Use Enter or Space on a rung to inspect its contract. Prerequisite links locate another rung in this list; open its summary to inspect it. Estimates are authored effort, not forecasts.
YS1 — Per-country legal lines as data, strictest when undeclared
Prerequisites: None declared; this does not establish execution eligibility.
Contract:
jur_rules_forAcceptance: jur_rules_for returns the rule row for a declared country (minimum age, parental-consent age, contact rules) read from a conf whose every row names the law it came from and the date it was read, returns the strictest line for an undeclared or unsourced country, and refuses a row without a source; the gate proves a declared country, an undeclared country getting the strictest line, and a sourceless row refused (planted RED then GREEN)
Authored effort: 2. Executor kind: Organ. Responsible, accountable and verifier not established. Inspect retained worklog.
Runtime observation: UNKNOWN; outcome UNKNOWN; observed epoch -1. Declared owner: . Receipt
, SHA-256. Identity-bound observation is not accepted completion. Qualification and deployment remain unverified by this projection.YS2 — Minor-to-minor contact only by mutual acceptance in adjacent age bands
Prerequisites: YS1 (acceptance unverified)
Contract:
ysf_peer_may_connectAcceptance: ysf_peer_may_connect allows two minors only when both accepted and their age bands are adjacent (bands are conf rows), refuses a one-sided request, refuses a non-adjacent pair, never answers for an adult pair (the two-deep wall decides those), and the guardian of each minor can see the friendship; the gate proves each verdict with a neg-control
Authored effort: 1.5. Executor kind: Organ. Responsible, accountable and verifier not established. Inspect retained worklog.
Runtime observation: UNKNOWN; outcome UNKNOWN; observed epoch -1. Declared owner: . Receipt
, SHA-256. Identity-bound observation is not accepted completion. Qualification and deployment remain unverified by this projection.YS3 — Anti-stalking without tracking
Prerequisites: None declared; this does not establish execution eligibility.
Contract:
ast_may_discoverAcceptance: ast_may_discover shows a member only to accounts that share a circle, a block makes the blocker invisible to the blocked account (no profile, presence or search hit), request rates are throttled by a conf rate, no location, presence or friend list of a minor is ever exposed, and re-contact through a new account is refused by the personhood claim, never by an IP or device record; the gate proves each with a planted stalker fixture
Authored effort: 2. Executor kind: Organ. Responsible, accountable and verifier not established. Inspect retained worklog.
Runtime observation: UNKNOWN; outcome UNKNOWN; observed epoch -1. Declared owner: . Receipt
, SHA-256. Identity-bound observation is not accepted completion. Qualification and deployment remain unverified by this projection.YS4 — Guardian consent and visibility without reading a message
Prerequisites: YS1 (acceptance unverified)
Contract:
fam_guardian_consentAcceptance: fam_guardian_consent opens a minor's account and lanes only with guardian consent below the country's consent age read from jur_rules_for, shows the guardian who the minor is connected with and never message content, and withdrawing consent closes the minor's lanes at once; graded against Instagram parent insight and Discord Family Center
Authored effort: 1.5. Executor kind: Organ. Responsible, accountable and verifier not established. Inspect retained worklog.
Runtime observation: UNKNOWN; outcome UNKNOWN; observed epoch -1. Declared owner: . Receipt
, SHA-256. Identity-bound observation is not accepted completion. Qualification and deployment remain unverified by this projection.YS5 — Abuse reports verifiable inside end-to-end encryption
Prerequisites: None declared; this does not establish execution eligibility.
Contract:
mfr_report_verifyAcceptance: mfr_report_verify accepts a reported sealed message only when its franking tag verifies against the reported sender, refuses a forged or altered report, and the server reads no unreported message; the gate proves a real report accepted, a forged one refused and an altered one refused
Authored effort: 2. Executor kind: Organ. Responsible, accountable and verifier not established. Inspect retained worklog.
Runtime observation: UNKNOWN; outcome UNKNOWN; observed epoch -1. Declared owner: . Receipt
, SHA-256. Identity-bound observation is not accepted completion. Qualification and deployment remain unverified by this projection.YS6 — No-tracking census over the connect serving path
Prerequisites: None declared; this does not establish execution eligibility.
Contract:
cnt_tracking_censusAcceptance: A census over the connect serving path refuses any IP geolocation lookup, device fingerprint or cross-session behavioural profile store, names every offender, and is bite-proven with a planted lookup that turns it RED; wired so a build that adds tracking is refused
Authored effort: 1.5. Executor kind: Organ. Responsible, accountable and verifier not established. Inspect retained worklog.
Runtime observation: UNKNOWN; outcome UNKNOWN; observed epoch -1. Declared owner: . Receipt
, SHA-256. Identity-bound observation is not accepted completion. Qualification and deployment remain unverified by this projection.YS7 — Sensitive-image flag for the device, never a server scan
Prerequisites: YS2 (acceptance unverified)
Contract:
cmf_device_blur_flagAcceptance: An attachment sent to or by a minor carries a flag telling the receiving device to blur it until tapped, the server never inspects the image, and an adult lane is unaffected; graded against Discord's blurred sensitive content for teens, where the rivals lead today
Authored effort: 1. Executor kind: Organ. Responsible, accountable and verifier not established. Inspect retained worklog.
Runtime observation: UNKNOWN; outcome UNKNOWN; observed epoch -1. Declared owner: . Receipt
, SHA-256. Identity-bound observation is not accepted completion. Qualification and deployment remain unverified by this projection.
Learning and practice paths
No structured learning path is declared for this plan. Existing research, roadmap and worklog remain available above.
Rung dossiers — every record that bears on a rung, in one place
Joined by symbol, never typed. Each dossier is assembled on every publish from the rows this board already carries: the plan's rung row, the matrix row that carries its contract symbol (its status re-measured by the one symbol ruler), the gate the organ declares and the verdict the evidence referee recorded on its last run, the reference marks in the rung text, the design rows that name the rung and the work log filed against it. The capability matrix links each cell to its dossier and each dossier links back to its cell and forward to the rungs it stands on; a dependency naming no rung on this plan is written as UNRESOLVED rather than linked. Absences are named: NO-MATRIX-ROW, NO-GATE-DECLARED, UNRECORDED.
Gate verdicts: UNSTAMPED — no per-gate verdict artifact is published for this domain yet (
nx_swcompare_evidence youthsafety writes it beside its stamp); every gate below reads UNRECORDED until it runs.Gate declarations:
knowledge/organ_gate.conf read from this working directory (1 rows) and from the estate root (196 rows); rows in both counted once: 0; declarations read: 197. Every declaration in either copy counts, so a stub beside the publisher can never hide the root.YS1 Per-country legal lines as data, strictest when undeclared · cell LANDED · gate NO-GATE-DECLARED
| Contract | jur_rules_for · executor Organ · 2 u · stands on nothing |
|---|---|
| Definition of done | jur_rules_for returns the rule row for a declared country (minimum age, parental-consent age, contact rules) read from a conf whose every row names the law it came from and the date it was read, returns the strictest line for an undeclared or unsourced country, and refuses a row without a source; the gate proves a declared country, an undeclared country getting the strictest line, and a sourceless row refused (planted RED then GREEN) |
| Matrix cell | Legal lines per country as data, strictest line when undeclared · runtime/_hdl_build/nx_connect_juris.nx · LANDED decl |
| Gate | NO-GATE-DECLARED — knowledge/organ_gate.conf carries no row for nx_connect_juris; declare nx_connect_juris TAB <gate> and the ship loop proves it and the verdict lands here. |
| Work log | 2026-09-25 queue INTAKE 1790358607 routed by nx_intake_route (operator-seat, epoch 1790360481) from ys-pm-seat: Y7 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): clear legal lines that work for every country. The age of -- sponsor intake-1790358607 plus2 2026-09-25 land nx_connect_juris.nx (buildroot/runtime/_hdl_build, sha256 97090d6733d92b4d, 20978 B) jur_rules_for + jur_account_decision over knowledge/connect_jurisdictions.conf (sha256 3a1e7a8d9603d8d5, 4644 B; every row names its law, status, effective date, platform scope, ref, mirror, pin and read date) + nx_connect_juris_gate GREEN 92/92 (qualify job 1790360635); planted defect (the pin check disabled in jur_row_class) went RED 87/90 on exactly the three pinless neg-controls (job 1790360442), restored plus the read-date field and its neg-control, GREEN; production table 10 rows = 1 admitted (US COPPA 16 CFR 312.2 consent below 13 by verifiable parental consent, eCFR point in time 2026-09-01 mirror knowledge/fetched/rf_0fae5d94.raw pinned) + 9 UNSOURCED + 0 refused; the strictest line computed from the table is consent below 13 by verifiable parental consent with no account minimum and no barred band, because only one law is sourced; a Utah, French or undeclared declarant gets that strictest line 2026-09-25 land SHIPPED nx_connect_juris_gate through nx_organ_ship (job 1790360683): built fa2d47ab95f7472f, prove GREEN 92/92 on the fresh build, first promote (live was absent, announced), offc twin installed, registered callable, admitted to knowledge/gateroster.conf with its bite receipt; the lib nx_connect_juris.nx is compiled into the gate and into any consumer that imports it (no binary of its own) 2026-09-25 measure second source landed: UK GDPR Art 8 as served revised by legislation.gov.uk (eur/2016/679/article/8, mirror knowledge/fetched/rf_988c5ce8.raw, 48223 B, pin 37432e8eff5d5326 matched by nx_filehash) reads lawful where the child is at least 13 years old, below 13 only with consent given or authorised by the holder of parental responsibility, and Art 8(2A) lets regulations move the age between 13 and 16; row GB UKGDPR-Art8 SOURCED; the COPPA mirror pin 5a29d13e4512092a matched too; the PROMOTED gate re-run through /api/gate_run (job 1790360850) reads 92/92 GREEN over the new table: 10 rows = 2 admitted + 8 unsourced + 0 refused, strictest line folds 2 rows = consent below 13 by verifiable parental consent, no account minimum, no barred band (conf sha256 bda8aa8d8b85a944, 5200 B); a GB declarant still gets the strictest line because the Online Safety Act 2023 row is UNSOURCED 2026-09-25 queue OPEN on YS1 after this leg: (1) sources not landed, each an UNSOURCED row that forces the strictest line until read -- EU GDPR Art 8 (EUR-Lex answered a 202 bot challenge; each member state also needs its own row), EU DSA Art 28 and the minors guidelines, UK Online Safety Act 2023 children duties, Australia social media minimum age (legislation.gov.au text is a script shell; try the Act download form), Brazil Lei 15211 ECA Digital (planalto refuses the fetcher TLS 1.2 handshake; transport rung owed), India DPDP 2023 s9 and its Rules commencement, Utah 13-71 and the app store act (litigated; read what is in force today); (2) the strictest line is thin (2 sourced laws, no barred band) until those land, so an undeclared minor is not barred anywhere yet; (3) the gate measures against a constant day 20260925 and the integrator must derive yyyymmdd from its clock by composing the estate civil-date incumbent; (4) the lib checks the pin FORM and the gate checks the mirror PRESENT, the sha256 match is today a hand nx_filehash and belongs in the refs gate; (5) contact rules named in the YS1 done-rule are not a column (YS2 ysf_peer_may_connect owns contact); (6) the age floor of an attested band comes from nx_connect_idage, the signup record carries only MINOR or ADULT, so a MINOR with no finer band reads as the youngest age 2026-09-25 measure VERIFIER CONFIRMED 92/92 GREEN (promoted gate re-run job 1790361014, prod rows 10 = 2 admitted + 8 unsourced + 0 refused, strictest recomputed by hand from the conf = consent below 13 rank 2, no min, no barred; lib 97090d67 and conf bda8aa8d re-hashed equal to the claim; both mirrors re-hashed equal to their pins; COPPA 312.2 under the age of 13 and UK GDPR Art 8 at least 13 years old read in the mirrors; bite RED 87/90 read in job 1790360442). Lib takes only a self-declared place, reads no content, IP or device, every age is a conf row. Findings: the strictest line is the strictest of SOURCED rows only, so an unsourced place (GB OSA, US-UT, AU, BR, EU) gets consent below 13 and a 13-15 minor reads ALLOW there, looser than the unread law may be; the gate has no tooth for a ref of dash, a mirror outside knowledge/, a bad scope token, or a production GB declarant; jur_ymd accepts day 31 in every month; the done-rule contact-rules field is absent (YS2 owns contact) 2026-09-25 land R7 wave 6: EU GDPR-Art8 row SOURCED in knowledge/connect_jurisdictions.conf from Regulation 2016/679 Art 8 AS ADOPTED served by legislation.gov.uk eur/2016/679/article/8/adopted (knowledge/fetched/rf_2a31c378.raw sha256 c9abb72c 30426 B, read 2026-09-25): consent given or authorised by the holder of parental responsibility below 16, member states may lower it by law to not below 13, Art 8(2) reasonable efforts to verify; effective 2018-05-25 from Art 99(2) It shall apply from 25 May 2018 (rf_dbca1ad2.raw sha256 40336800); EUR-Lex ELI answered status 202 with the 2035 B bot challenge again (rf_d7db4d68.raw), so an amendment since adoption is UNVERIFIED; EU is not an ISO 3166-1 country, so member-state declarants still get the strictest line until their own ages are sourced 2026-09-25 land R7 wave 6: GB OSA2023-s12-children-safety-duties row SOURCED from legislation.gov.uk ukpga/2023/50/section/12 (rf_2c34aced.raw sha256 dcfe9d15 50574 B, read 2026-09-25): its Commencement Information reads S. 12 in force at 10.1.2024 by S.I. 2023/1420 reg. 2(d), the effective date; s12(6) highly effective age verification or estimation where s12(4) requires it; s12 draws no account-age, consent or barred line, so the row carries four dashes and a GB declarant now gets its DECLARED line (UK GDPR Art 8: consent below 13, parental_consent) instead of the strictest; s11, s35-37 and Part 5 were not read 2026-09-25 land R7 wave 6: BR Lei-15211-2025-ECA-Digital-Art24 row SOURCED from the Senado Federal publication text legis.senado.leg.br/norma/41465823/publicacao/41471709 (rf_8da92722.raw sha256 4159a3ac 111114 B, read 2026-09-25) because planalto still fails the fetcher TLS 1.2 handshake (server suite 49199 = 0xC02F, nx_https_get ERROR TLS handshake failed); Art 24 caput: users or accounts of children and adolescents de ate 16 anos must be linked to the account of a legal guardian, encoded as consent below 17 (inclusive reading, the strict one; lower to 16 if counsel reads it as under 16) with verifiable_parental_consent, the table having no guardian-linked-account class (owed); effective 2026-03-17 from Art 41-A added by Lei 15.352 de 25/02/2026 Art 19 (rf_d4fc447f.raw sha256 7d2143b3); the Senate alteration register (rf_92245690.raw sha256 5f2f1a68) lists no change to Art 24 2026-09-25 measure R7 wave 6: /api/gate_run nx_connect_juris_gate job 1790372818 GREEN 92/92 exit 0 on SUBJECT bytes=9530; production rows 10 = admitted 5 + unsourced 5 + refused 0 (was 2 + 8 + 0); strictest line rows_used 5, consent below 17 (was 13; 17 from the BR inclusive reading, 16 from EU GDPR Art 8), method rank 2 verifiable_parental_consent (unchanged), min account age none, barred band none; the US, US-UT and FR production teeth still hold (Utah keeps both rows UNSOURCED) 2026-09-25 queue R7 wave 6 OPEN: AU OSA-Amendment-SMMA-2024 still UNSOURCED, so the strictest line still has NO barred band (FRL asmade/text is the same 77930 B script shell, esafety.gov.au fails the fetcher TLS path nishi-t12 t12-unknown, AustLII search 403) -- owed a text reader for the Register's PDF or Word download form, or the esafety TLS rung; IN DPDP s9 plus its Rules commencement, US-UT 13-71 plus its litigation status, US-UT App Store Accountability and EU DSA Art 28 were not attempted (this seat started after its clock deadline); member-state GDPR Art 8 ages are owed row by row, and an FR row first needs the gate's FR production tooth changed; refs rows for gdpr_art8_adopted, gdpr_art99_adopted, osa2023_s12, br_lei15211_art24 and br_lei15352_art19 are carried in the R7 result for the youthsafety refs owner 2026-09-25 land W8 SEAT FRONT-DOOR juris_rules WIRED on the CONNECT front door (MCP nx_connect, API /api/organ_run target=nx_connect, workflow plan-connect-frontdoor- row 4): jur_rules_for plus jur_account_decision over knowledge/connect_jurisdictions.conf through jur_conf_load, the place self-declared (ISO 3166 alpha-2 plus an optional subdivision, longer input refused), today yyyymmdd and the age floor supplied by the caller so the verb is a pure function of its arguments and the table; a table with no admitted row in force answers refused_no_table with ok 0 and decided 0 and names no account decision (planted empty-table neg-control T19 in nx_connect_api_gate, 23/23 GREEN on the NAS). Live: US age 12 = allow-with-parental-consent (consent below 13, method rank 2), table 10 rows = 5 admitted + 5 unsourced + 0 refused, partition_ok 1. Nothing stored, no IP, device or location signal read. Lib nx_connect_api_lib.nx sha256 973dc857, live nx_connect_api.elf sha256 b0552704 2026-09-26 measure BR-ART24 wave 12 (T0 1790437756): Lei 15.211 Art 24 de ate 16 (dezesseis) anos de idade read against every official source reachable today. (1) The Act, Senate publication rf_8da92722.raw (pin 4159a3ac re-verified): exactly two age phrases in 111114 B, Art 9 menores de 18 (dezoito) anos de idade and Art 24 de ate 16, zero incompletos, and Art 2 par 1 applies the concepts of ECA Art 2. (2) The ECA, Senate original rf_a5beccbf.raw (sha256 4e73870e) and Camara compiled text rf_2ef6814f.raw (sha256 48537eb3): Art 2 a pessoa ate doze anos de idade incompletos and Art 36 a pessoa de ate 18 (dezoito) anos incompletos (the compiled ECA's only de ate phrase), so the ECA spells an exclusive ate bound with incompletos and on the bare text Art 24 leans INCLUSIVE. (3) The regulating Decreto 12.880 de 18/03/2026, Senate publication rf_c437b91e.raw (sha256 bbfaede7, complete through Art 54): zero age numbers, and its Art 20 lets MGI offer a vinculacao solution with no band. (4) The official joint FAQ Perguntas e respostas sobre o ECA Digital, atualizado em 30 de julho de 2026, elaborado por ANPD, MJSP and Secom/PR (linked from the gov.br/mj Sedigi ECA Digital page; rf_1cf8a78e.raw sha256 1aac3137, 115924 B ending in %%EOF; text by nx_pdf_text in rf_1cf8a78e.txt): Para usar redes sociais, criancas e adolescentes menores de 16 anos deverao ter contas vinculadas aos seus responsaveis; and Se o usuario tem menos de 16 anos, a conta deve estar ligada a de um dos responsaveis legais. DECISION: EXCLUSIVE with an official source (the enforcing authority's published reading decides; the textual counter-reading stays in the row note). No secondary commentary was fetched because the official text is not silent. Not read: ANPD's own site (its search answered a maintenance page titled Estamos em manutencao with status 200) and the Camara or Senate reports on PL 2628/2022 (Camara id 2477340). 2026-09-26 land BR-ART24 wave 12: knowledge/connect_jurisdictions.conf BR row Lei-15211-2025-ECA-Digital-Art24 consent-below 17 to 16 under CAS (the probe answered content-hash h709765f670eb961b at 9530 B; edit OK 9530 to 11460 B; read back: the row reads SOURCED 16, one READING SETTLED note, the old inclusive sentence gone); read date 2026-09-26; the note carries both FAQ sentences with pins, the decree and ECA evidence, and the condition for going back to 17 (a binding ANPD act or a court reading the Act inclusively); only the BR row was touched. nx_connect_juris_gate via /api/gate_run: before, 92/92 GREEN with prod_strictest_consent_below=17 on 9530 B; after, 92/92 GREEN on SUBJECT bytes=11460: rows 10 = admitted 5 + unsourced 5 + refused 0, strictest line rows_used 5, consent below 16 (EU GDPR Art 8 and BR now agree), method rank 2 verifiable_parental_consent, min account age none, barred band none. Knock-on: every undeclared, unsourced or rowless place's strictest line drops from consent below 17 to consent below 16. Owed to the youthsafety refs owner: a refs row br_ecadigital_faq_20260730 for the FAQ mirror knowledge/fetched/rf_1cf8a78e.raw. 2026-09-26 lesson An age phrase can read one way on a statute's bare text and the other way in the regulator's published guidance: the ECA drafting convention (incompletos marks an exclusive ate bound) puts a 16-year-old inside de ate 16 anos, while ANPD, MJSP and Secom write menores de 16. The estate follows the enforcing authority's explicit reading and keeps the textual counter-reading in the row, so a later binding act flips one field back. Also: a gov.br site search served a maintenance page with status 200, so read the title of every fetched page before citing it, and a PDF mirror is read through nx_pdf_text (kerning splits words, so probe short tokens such as 16 and vincula, never whole phrases). 2026-09-26 land wave 11 seat sourced the YS1 table (knowledge/connect_jurisdictions.conf 11460 B, 10 rows, to 26401 B, 18 rows; admitted 5 to 13, unsourced 5, refused 0), every admitted row with a mirror pinned by nx_filehash and read 2026-09-26: AU Online Safety Amendment (Social Media Minimum Age) Act 2024 SOURCED as a barred band below 16 effective 2025-12-10 (the Act read in the Register's Word form through nx_docx; the day read from the Minister's notifiable instrument F2025N00628, found through the Register API api.prod.legislation.gov.au; the enforcement Act No. 83 of 2026, commenced 12 Sep 2026, doubles penalties and changes neither age nor duty); EU DSA Art 28 SOURCED as a duty with four dashes (EUR-Lex TXT/HTML served 840293 B, applies from 17 Feb 2024 by Art 93(2)); ES LOPDGDD Art 7 consent below 14; NL UAVG Art 5 with GDPR Art 8 consent below 16; IE DPA 2018 s31 below 16 (commenced 25 May 2018 by S.I. 174/2018); DE sets no Art 8 age (BDSG read whole, no Art 8 citation), GDPR 16; FR LIL Art 45 below 15 by joint consent (CNIL copy dated 15 Nov 2024); IT Codice Art 2-quinquies below 14 (Garante testo coordinato PDF, witnessed lower bound 30 Dec 2025); IN DPDP Act s9 read (consent below 18 by verifiable parental consent) but kept UNSOURCED for an unwitnessed commencement; FR Loi 2023-566 and PL named UNSOURCED (Legifrance and the Sejm API fail the fetcher TLS path); US-UT 13-71 code viewer read (one version, effective 1 Oct 2024) but no court source for what the litigation left in force, still UNSOURCED; nx_connect_juris_gate GREEN 92/92 on the production table through /api/gate_run, no tooth changed (FR stays strictest because of the UNSOURCED Loi 2023-566 row) 2026-09-26 measure partition 18 = 13 admitted + 5 unsourced + 0 refused; strictest line folded from all 13 in-force rows (the gate's second walk agrees): consent below 16 by verifiable parental consent AND accounts barred below 16, no minimum age; at wave start it read consent below 17 VPC with no barred band; two moves, only one by this seat: the BR row was set to 16 earlier the same day by another seat citing the ANPD, MJSP and Secom guidance of 30 Jul 2026 (so the open Art 24 de ate 16 anos question now reads exclusive, not inclusive), and the barred band is AU s63D admitted by this seat; that band now reaches every undeclared declarant and every place with an UNSOURCED row (US-UT, FR, IN, PL) or with no row, so a floor below 16 there answers refuse-barred-age-band; nx_connect_api_lib juris_rules (the alpha /api/v1 verb, wave-10 owned) reads the same table, so the alpha answer for those declarants changed with the data; nx_connect_api_gate T18 asserts no strictest value and is unaffected; OPERATOR DECISION OWED: keep the strictest line as the field-wise max over every country (the table's rule, now a global under-16 bar for the undeclared) or give a tainted place a narrower fallback 2026-09-26 queue owed to finish YS1 sourcing: (1) the TLS rungs that blocked three official hosts, each measured four times: legifrance.gouv.fr ServerKeyExchange signature (t12-ske-signature rc=-405), api.sejm.gov.pl TLS 1.3 only (alert 40), gazzettaufficiale.it cert pipeline (t12-cert-pipeline rc=-210); infrastructure.gov.au and esafety.gov.au t12-unknown; parlinfo.aph.gov.au 403; (2) the DPDP s9 commencement notification (then IN is admitted, PENDING until its date); (3) Utah 13-71 Part 2 text (the xml download) and the NetChoice v. Reyes docket status from the court, and the UT App Store Accountability row; (4) the AU Age-Restricted Social Media Platforms Rules 2025 F2025L00889 and its 2026 amendment for the platform scope; (5) method classes for FR joint consent and BR guardian-linked accounts; (6) Loi 2023-566 and any later French law, then the FR production tooth must be updated deliberately when FR turns declared 2026-09-26 land nx_connect_juris_gate SHIPPED 948eb9af (was fa2d47ab) through nx_organ_ship: seven production teeth for the rows sourced this leg (AU declared, AU barred below 16, an AU floor of 15 refused as a barred band, ES declared, ES parental consent below 14, ES method parental_consent, and neg-control a Polish declarant whose only row is UNSOURCED gets the strictest line) and the French tooth RENAMED with its assertion unchanged (France now has a sourced Art. 45 row beside the UNSOURCED Loi 2023-566 row, so the old words no sourced row were false; the one lost run, approved by allow_loss_v1 754962c9); behavior reviewed (review ba10ca47, observation 6c868a25); qualify run and the served /api/gate_run both 99/99 GREEN on the production table; the new teeth are RED on the pre-leg table by derivation (AU was UNSOURCED so how read strictest-unsourced, ES and PL had no row so how read strictest-no-row), not by an executed run, because the pre-leg bytes were edited in place 2026-09-26 measure W14 SEAT LAWS-MEMBERSHIP-COUNTRIES: the order to source countries in is the Church's own membership figures, read 2026-09-26 from newsroom.churchofjesuschrist.org/facts-and-statistics (worldwide 17,887,212, knowledge/fetched/rf_bd39cbcf.raw sha256 d31ecdda...) and its country pages, every countryStatistics block lastUpdatedDate Wed Apr 29 2026: US 6,929,770 (rf_046abdcb) / BR 1,573,360 (rf_f976c1c5) / MX 1,572,287 (rf_124095c6) / PH 905,082 (rf_3ecc9706) / PE 667,836 (rf_359ef7fd) / CL 624,203 (rf_e8943726) / AR 505,819 (rf_a0bc78ba) / GT 297,143 (rf_74e5bcd2) / EC 279,046 (rf_ed9c6f64) / NG 274,043 (rf_af6c9b20) / BO 235,773 (rf_220d72e7) / CO 223,090 (rf_50652be7) / CA 211,581 (rf_fa9effb9) / HN 197,073 (rf_f1963e25) / VE 179,389 (rf_4b4b38d0) / DO 156,358 (rf_fbb60796) / SV 132,399 (rf_4bdee5db) / GH 122,978 (rf_e8dc7760); the ranking covers the 18 country pages fetched, not every country (GB, AU, JP, CD, UY, PY, NZ and the Pacific nations were not fetched and can sit anywhere below MX), so it is an order of work, not a census 2026-09-26 land W14 LAWS-MEMBERSHIP-COUNTRIES rows under CAS in knowledge/connect_jurisdictions.conf (26803 B to 43402 B, five CAS edits, each hash taken from the writer's own refusal): ADMITTED CL Ley 21.719 Art 16 quater (BCN LeyChile XML rf_67f7b8a6, consent below 14 by padres o representantes legales, PENDING until 2026-12-01 by its transitorio), CA OPC Guidelines for obtaining meaningful consent (rf_50411e5a, the regulator's position under 13, Date modified 2025-08-11), CA-QC P-39.1 s4.1 and s14 (LegisQuebec rf_5f874e5b, consent below 14 by the holder of parental authority or the tutor), PE Reglamento Ley 29733 DS 016-2024-JUS Art 22 and Art 25 (El Peruano pages republished by the ANPD, rf_901a8960, consent below 14 by patria potestad or tutela, in force 2025-03-31) and IN re-admitted from UNSOURCED as PENDING (DPDP Rules 2025 G.S.R. 846(E) of 2025-11-13, rf_2d79c142: r1(4) puts rule 10, verifiable consent of the parent, in force eighteen months after publication, so consent below 18 by verifiable parental consent from 2027-05-13); UNSOURCED with what was read and what is owed: EC, MX, PH, AR, CO, NG, GH, PL (re-noted) and US-UT 13-71 (re-noted: chapter XML rf_a2754bd1 read, no account bar or consent-to-open, litigation status unread); /api/gate_run nx_connect_juris_gate 99/99 GREEN on the new table before the gate change: rows 29 = admitted 18 + unsourced 11 + refused 0, strictest line folded from 16 in-force rows = no minimum account age, consent below 16, method verifiable parental consent (rank 2), barred below 16 (unchanged by this leg: the new in-force lines are 13 and 14) 2026-09-26 land nx_connect_juris_gate SHIPPED 04286dee (was 948eb9af, banked first at knowledge/fetched/bank_nx_connect_juris_gate_pre_1790461100.elf, sha256 948eb9af verified) through nx_organ_ship: thirteen production teeth pin this leg's rows (PE declared, PE consent below 14, PE method parental_consent; CA-QC declared, folds 2 rows, consent below 14; CL strictest-no-row while PENDING and declared with consent below 14 on 2026-12-01; IN strictest-no-row while PENDING, consent below 18 by verifiable parental consent on 2027-05-13, and the strictest consent-below of an undeclared place rising to 18 on that day, emitted as prod_strictest_consent_below_on_2027_05_13=18); content GREEN (no lost run), behaviour DIFFERS as expected (more teeth); qualify run and the served /api/gate_run both 112/112 GREEN; the new teeth are RED on the pre-leg table by derivation (PE, CA-QC and CL had no row so how read strictest-no-row and the 2026-12-01 CL tooth cannot read declared; IN was UNSOURCED so how read strictest-unsourced and no 18 could enter), not by an executed run, because the table was edited in place 2026-09-26 land W14 SEAT LISTING-AND-COUNTRY: the juris lines now gate sign-up itself (CN13 csu_signup_admit through csu_juris_admit). With Australia's under-16 bar in the strictest line, a minor who declares no place is refused by name (CSU_REFUSED_COUNTRY_REQUIRED) instead of being judged by the strictest line in silence; a SELF-DECLARED place (ISO 3166-1 alpha-2 with an optional ISO 3166-2 subdivision, never IP, never a device signal) is judged by jur_rules_for plus jur_account_decision over the caller's table against the attested band's youngest age, and each outcome refuses by name (COUNTRY_FORM, JURIS_TABLE fail closed, JURIS_BARRED, JURIS_UNDER_MIN, PARENTAL_CONSENT unless a verified guardian consent meets the method rank the law names) or admits; an adult may leave the place undeclared and the place is never stored. Signup gate production teeth on knowledge/connect_jurisdictions.conf: an AU minor at 15 refused JURIS_BARRED (Online Safety Act 2021 s63D), a US minor at 12 without verified guardian consent refused PARENTAL_CONSENT (16 CFR 312.2); fixture teeth on user-assigned codes XA, XB, XC for every refusal, the consent route on the same challenge, and a missing table. RED job 1790460544, GREEN 85/85 job 1790460800, SHIPPED f60018f5. Detail on connect.plan CN13 row 1790461701. 2026-09-26 lesson W14 LAWS-MEMBERSHIP-COUNTRIES: a legal line blocked by transport or extraction is the strictest line, never a guess, and two instruments failed silently in the direction that would have invented absence: nx_pdf_text exits 0 on unmapped fonts (the Diputados LFPDPPP and Codigo Civil Federal, the NDPC Act and a GovInfo opinion all extract with the key words 0 or 7 times in hundreds of KB) and reads the Polish Official Journal lossy, so a zero from it proves nothing (debt 1790461733); and a WebSearch summary attributed the Mexican minors-consent rule to the LFPDPPP when the DOF text puts it only in the public-sector LGPDPPSO (bytes 774161 and 783431, before the LFPDPPP's Articulo Tercero at byte 1088642), caught only by partitioning the decree by its article offsets; a statute's silence on minors is not an age line either: MX, PH and AR read silent or maturity-based and stay UNSOURCED rather than being encoded as no line (an acquittal); the TLS rungs blocked five more countries' official hosts (debt 1790461725, recurrence of 4514) 2026-09-26 queue W14 worklist in membership order after this leg (table 32 rows = 18 admitted + 14 unsourced + 0 refused, gate 112/112): MX civil capacity (a text-mapped official Codigo Civil Federal; LFPDPPP 2025 read silent) / PH civil capacity (RA 10173 read silent; the Civil Code articles and any NPC issuance) / AR (the Res 4/2019 annex criteria; the AAIP proposal of consent from 16 once adopted) / GT, BO, HN (nothing fetched; no data statute known to the seat; civil codes and gazette searches) / EC (the Registro Oficial text of LOPDP Art. 21 and a settled scope for its 15-year sentence) / NG (the NDPA 2023 text; both NDPC copies were a font-less PDF and a WordPress shell) / CO (every official host refused TLS) / GH (certificate pipeline) / VE, DO, SV (not attempted) / IN (the s1(2) S.O. naming s9's own date; the row is PENDING 2027-05-13 on Rules r1(4)) / US-UT (the injunction and the Tenth Circuit docket from a court) / PL (a lossless text of the 2018 Act) / FR Loi 2023-566 and US-UT App Store Act (earlier legs); a design question for the table owner, not the operator: whether a civil-capacity reading (minors act through their representatives below the age of majority) may be admitted as a consent line for places whose data statute is silent, since the strictest line (consent below 16, barred below 16) is less strict on the consent axis than a majority-18 representation rule for a 16- or 17-year-old 2026-09-26 measure W14 close: knowledge/connect_jurisdictions.conf 49715 B sha256 90551334346cf0f02af6da7c0fcfa6c8b43ba08aaec8ef136491f672f9a7cbd8 after later UNSOURCED rows (AR re-read with AAIP Res 4/2019 and a not-in-force AAIP proposal of consent from 16; MX re-read from the DOF decree, LFPDPPP 2025 silent on minors; PH re-read from the NPC copy of RA 10173, silent; GT, BO, HN named NOT READ; DO Ley 172-13 fetched but font-less; SV Decreto 144 refused by the certificate pipeline; CO two more official hosts refused); served /api/gate_run nx_connect_juris_gate (build 04286dee) 112/112 GREEN: rows 34 = admitted 18 + unsourced 16 + refused 0; strictest line folded from 16 in-force rows = no minimum account age, consent below 16, verifiable parental consent (rank 2), barred below 16; on 2027-05-13 the strictest consent-below rises to 18 when the IN row takes effect 2026-09-28 measure W16 SEAT LAWS-CONTINUED (T0 1790613413, redo of the wave-15 seat that died with no rows): wave 15's partial work was found in the sources, not the boards -- the SOURCED-SILENT grammar in nx_connect_juris.nx (edited 1790465648) and jg_silent_teeth plus production teeth expecting MX, US-UT and a silent row in nx_connect_juris_gate.nx (1790466225, built 125872 B, never promoted), while knowledge/connect_jurisdictions.conf was still the W14 close (49715 B sha256 90551334, banked this leg at knowledge/bank/connect_jurisdictions.conf-pre-w16-1790614100, gate 04286dee banked at knowledge/bank/nx_connect_juris_gate.elf-pre-w16-1790614100, both hash-verified). Sources read 2026-09-28 from official copies: MX Codigo Civil Federal texto vigente (ultima reforma DOF 14-11-2025) in the Camara de Diputados Word form doc/CCF.doc (rf_a6d5cb6f.raw sha256 75bc335c, the 8-bit text reads directly where the PDF has no font maps): Art. 646 mayor edad a los dieciocho anos cumplidos, Art. 23 incapaces contract through their representatives (2020 exception: a bank account from 15), Art. 424 no obligation without the express consent of whoever holds the patria potestad, Art. 450 I, Art. 635 and 637, Art. 148 marriage at 18; MX LGDNNA texto vigente (DOF 15-01-2026) doc/LGDNNA.doc (rf_a8aa5897.raw sha256 2fdc6ea7): Art. 76 privacy and data protection plus the parents' duty to guide, supervise and restrict, Art. 77-78 media, Art. 101 Bis to 101 Bis 3 ICT access and safe internet, no account line; MX LFPDPPP decree transitorio Primero (in force 2025-03-21); PH NPC Circular 2023-04 Guidelines on Consent (rf_0754956a.raw sha256 260acf8e): 27 sections, no minors provision, Section 1 leaves the Civil Code framework on obligations and contracts unmodified; PH NPC Advisory 2024-03 Child-Oriented Transparency (rf_3a794d6e.raw sha256 6e792767): a child is below 18, child-readable notices, breach notice to children and parents, no account line; US-UT 13-76 identified as le.utah.gov/xcode/Title13/Chapter76/C13-76_2025050720250507.xml (rf_168b786d.raw, re-fetched to the same sha256 02433db4): obligations Beginning May 6, 2027 (2026 GS ch. 157), 13-76-202(4)(a) no contract enforced against a minor without verified VPC; US-UT 13-71 re-read: VPC only to change the default privacy setting (13-71-204), no account line. NOT READ: the PH Civil Code and Family Code (Official Gazette status 403 twice, Supreme Court E-Library t12-cert-pipeline rc=-209 four tries), Ecuador's SPD (spd.gob.ec and www t12-connect rc=-2) 2026-09-28 land W16 LAWS-CONTINUED: knowledge/connect_jurisdictions.conf 49715 B to 63048 B (sha256 a3927401a54bf1bec7bbffde42f8594a942c691bf303a06d2e9f17cd6fdd56fc) in twelve size-CAS edits (one ETIMEDOUT reply had not landed: size unchanged and the new phrase counted 0, the self-adjudicating re-issue landed), 34 rows to 40: MX split into CCF-Art646-Art23-Art424-civil-capacity SOURCED consent below 18 by parental_consent (in force, witnessed 2025-11-14; declared imprecision: the 32 state codes not read), LGDNNA-Art76-Art101Bis-duties SOURCED four-dash, LFPDPPP-2025 SOURCED-SILENT (2025-03-21); PH split into RA-10173 SOURCED-SILENT, NPC-Circular-2023-04 SOURCED-SILENT, NPC-Advisory-2024-03 SOURCED four-dash and Civil-Code-Art1327-with-Family-Code-Art234-RA-6809 UNSOURCED (so a Philippine declarant still gets the strictest line); AR split into Ley-25326 SOURCED-SILENT and CCyC-Art26-progressive-autonomy UNSOURCED (the old note kept); US-UT 13-71 admitted SOURCED four-dash (an injunction can only take duties away, never add a line) and 13-76 admitted SOURCED PENDING consent below 18 by VPC from 2027-05-06; the header documents SOURCED-SILENT and when a four-dash duty row may stand. The grammar is wave 15's (row-level: read and silent, admitted, counted apart, never taints, never draws; place-level: a place whose in-force rows are all silent gets the strictest line, how strictest-silent) -- kept, because a statute's silence settles nothing about the place's civil-capacity law, and the place-level no-line answer already exists as a SOURCED four-dash row. nx_connect_juris_gate: wave 15's silent teeth kept; this leg replaced its MX tooth (MX now declared: consent below 18, parental_consent, folds 2 rows, never the silent row), added PH and AR neg-controls (a silent row beside an UNSOURCED civil row must not acquit), renamed the 2027-05-13 tooth (rises to 18 became is 18) and pinned today's strictest consent-below 18. EXECUTED RED ON THE OLD, GREEN ON THE NEW: the new gate over the pre-leg table 151/161 RED (job 1790614502: the silent, Utah, MX and strictest teeth) and 161/161 GREEN over the new table (job 1790614919); the served old gate 04286dee over the new table 110/112 RED (job 1790614931: the old lib REFUSES the 4 SOURCED-SILENT rows and its Utah tooth expected UNSOURCED). nx_organ_ship refused at stage 4 twice (jobs 1790615016, 1790615048): loss approved allow_loss_v1 9e16adbb (2 lost runs, both superseded tooth names, record knowledge/status/harness/loss-9e16adbb...record) but no qualified behavior observation exists by construction (the live gate is RED on the new table, osb_qualified needs both exits 0); PROMOTED through /api/promote expect_sha256 bd49f3ced7dea7093ed2aa1be574c7a80bd6a0ace663c004255cc2a80b96201c (job 1790615180, prev banked), _offc twin installed (job 1790615205), nx_job_run of the promoted binary 161/161 GREEN (/tmp/juris_gate_w16.out 19141 B) 2026-09-28 measure W16 partition and strictest line on the production table after this leg (promoted gate bd49f3ce, 161/161 GREEN via nx_job_run and in the qualify run): rows 40 = admitted 27 + unsourced 13 + refused 0; admitted 27 = pending 3 (CL 2026-12-01, US-UT 13-76 2027-05-06, IN 2027-05-13) + out-of-scope 0 + SOURCED-SILENT 4 (MX LFPDPPP, PH RA 10173, PH NPC Circular 2023-04, AR Ley 25.326) + in-force line rows 20; the strictest line folded from the 20 in-force rows = no minimum account age, consent below 18 (was 16: the MX Codigo Civil Federal row), method rank 2 verifiable_parental_consent, barred below 16 (AU s63D); on 2027-05-13 consent below stays 18. Declared answers: MX = declared, consent below 18 by parental_consent (2 rows folded); US-UT = declared, consent below 13 by VPC (US COPPA plus the 13-71 duty row) and below 18 by VPC from 2027-05-06; PH and AR = strictest-unsourced (their civil-capacity rows are UNSOURCED; the silent rows neither taint nor acquit). KNOCK-ON: every undeclared declarant, every place with an UNSOURCED or refused row (PH, AR, FR, PL, EC, CO, NG, GH, GT, BO, HN, DO, SV) and every rowless place now reads consent below 18 by VPC plus the under-16 bar, so a 16- or 17-year-old there needs verified guardian consent where the old line allowed them; CN13 sign-up already refuses an undeclared minor by name. CONSUMERS NOT REBUILT: nx_connect_api (juris_rules verb), the signup gate and both connect_appd builds compile the OLD lib, which REFUSES the 4 SOURCED-SILENT rows -- fail-closed (MX, PH and AR read strictest there, and the partition shows refused 4) until each is rebuilt on its owner's lane. SERVED /api/gate_run FAST for this gate reads exit 141 RED (job 1790615207): the 16384 B capture cap closes the pipe and the gate's 19141 B of output dies of SIGPIPE -- the gate is GREEN; debt 1790615554 (sev 6) names the transport fix; the gate roster runner captures 65536 B and is unaffected 2026-09-28 measure W16 BITE on the SOURCED-SILENT code of nx_connect_juris.nx through the promoted gate bd49f3ce, nx_gate_bite aimed numeric mutation, four mutants, four KILLED, zero survivors, zero not-reached: jur_rules_for site 62 (the silent-row counter, job 1790616202), jur_rules_for site 80 (if dsil > 0 then how = strictest-silent, job 1790616250), jur_row_class site 26 (the four-dashes check a SOURCED-SILENT row must pass, job 1790616335) and jur_row_class site 59 (a silent row classed SILENT, job 1790616370); every run restored the lib byte-identical (23743 B) and restored both gate twins, and the served nx_connect_juris_gate.elf and _offc twin re-hash to bd49f3ce afterwards; with the executed old-vs-new runs this is the non-vacuity proof of wave 15's grammar that wave 15 never got to take 2026-09-28 measure W16 SEAT LAWS-CONTINUED second run (T0 1790618451; the first run's rows 1790615600 to 1790616400 stand; its final table 64085 B sha256 96cb361e, the gate source 3969f89b and the served gate bd49f3ce were banked at knowledge/bank/connect_jurisdictions.conf-96cb361e-pre-lawscont2-20260928, knowledge/bank/nx_connect_juris_gate.nx-3969f89b-pre-lawscont2-20260928 and knowledge/bank/nx_connect_juris_gate.elf-bd49f3ce-pre-lawscont2-20260928, each verified byte-for-byte by nx_filecopy): official sources read 2026-09-28 -- PH Republic Act No. 6809 in full on the Senate Legislative Reference Bureau (ldr.senate.gov.ph, knowledge/fetched/rf_7bff9703.raw sha256 39766630): Family Code Art. 234 as amended, majority at eighteen, and Art. 236, emancipation ends parental authority and qualifies for all acts of civil life, in force on completion of publication 1989-12-18; GT Codigo Civil DL 106 in the ONSEC compilation on mcd.gob.gt (rf_416f07d3.raw sha256 6f2eaed9): Art. 8 majority at eighteen, Art. 254 the patria potestad represents the minor in all acts of civil life, Art. 1251 and 1254 capacity, Art. 2178 in force 1964-07-01; GT Iniciativa 6572 (congreso.gob.gt, rf_333ad856.raw): a data-protection bill of 8 July 2025 sent to commission on 5 August 2025 whose exposicion says Guatemala lacks such a law and whose text sets no minors' age or method; GT Ley PINA Decreto 27-2003 (albakeneth.gob.gt, rf_6a82729b.raw): no account line; VE Codigo Civil 1982 transcription (sapi.gob.ve, rf_6f5d5858.raw sha256 f7e3c2f2): Art. 18 majority at eighteen, Art. 1.144 minors incapable to contract; DO Ley 172-13 in the Gaceta Oficial pages served by the Camara de Diputados (rf_8cfee364.raw sha256 29719c24; the Presidencia copy had read font-less): Art. 79 sends minors' data to the children's code and special laws, no age; HN Codigo de la Ninez Decreto 73-96 (poderjudicial.gob.hn, rf_c8d06602.raw): under eighteen a child for all legal effects, no consent rule; BO Codigo Civil copy on obs.organojudicial.gob.bo (rf_2f81d2b9.raw) carries the unreformed 1975 Art. 4 (twenty-one) and was NOT admitted. NOT READ, the failure class named in each row: CO (cert-pipeline rc=-212 on the Corte Constitucional and the SIC, TLS alert 70 on the Cancilleria normograma, 404 on the AGN normativa), EC (Cancilleria RO copy cert-pipeline rc=-212, gob.ec recv_sh verdict 3), NG (the ndpc download page holds only a cover image, the old path 404, cert.gov.ng 403), GH (dpc.gov.gh serves Act 843 but nx_pdf_text maps no fonts), SV (asamblea cert-pipeline rc=-212), PL (the ISAP consolidated text drops every diacritic word), VE LOPNNA and the 2022 civil-code reform (asambleanacional.gob.ve recv_sh verdict 3 then alert 40), BO (silep connect rc=-2, Gaceta incomplete flight), HN civil and family codes (tsc.gob.hn cert-pipeline rc=-209). FOR THE FETCHER OWNER: recv_sh verdict 3 is NX_TLS13_RECV_SH_BAD_FORMAT (ServerHello parse failed) on gob.ec, asambleanacional.gob.ve, corteconstitucional.gov.co, tsc.gob.hn and cancilleria.gov.co, one defect class behind five official hosts. EXCEPTION NAMED: candidate URLs were triaged with the harness web search because two nx_websearch queries returned no official legal page (the Nishi index does not cover these hosts); every byte cited was fetched and pinned by nx_research_fetch 2026-09-28 land W16 LAWS-CONTINUED second run: knowledge/connect_jurisdictions.conf 64085 B to 77324 B (sha256 recorded in the next row) in fifteen size-CAS edits, each receipt read before the next, rows 40 to 43: PH civil row ADMITTED SOURCED consent below 18 by parental_consent (Family Code Art. 234 and 236 as amended by RA 6809, effective 1989-12-18; declared imprecision: Civil Code Art. 1327 not read, Official Gazette 403, SC E-Library cert-pipeline, PCW 403), so PH is DECLARED; GT row ADMITTED SOURCED consent below 18 by parental_consent (Codigo Civil DL 106 Art. 8 and 254, effective 1964-07-01; Iniciativa 6572 recorded as a bill that draws no line; Ley PINA read, no account line), so GT is DECLARED; VE civil row ADMITTED SOURCED (Codigo Civil Art. 18 and 1.144, 1982-07-26) beside a new UNSOURCED LOPNNA-and-data-protection row, so VE reads strictest-unsourced (it had no row); DO Ley 172-13 ADMITTED SOURCED-SILENT (Art. 79 defers, G.O. 10737 of 2013-12-15) beside a new UNSOURCED Ley-136-03-and-Codigo-Civil row, so DO stays strictest; the HN, SV, CO, NG, GH, PL, EC and BO UNSOURCED notes carry this run's reads and failures. nx_connect_juris_gate: the PH neg-control became PH declared teeth (how, consent 18, method parental_consent, 2 rows folded), GT declared teeth were added, and DO and VE neg-controls carry the old PH shape (a silent or civil row beside an UNSOURCED row must not declare). EXECUTED RED ON THE OLD, GREEN ON THE NEW: the new gate over the pre-change table 163/169 RED (job 1790620633: PH how, method and rows, GT how and method, VE how), 169/169 GREEN over the new table (job 1790621083, the same artifact by build-cache hit); the served old gate bd49f3ce over the new table 160/161 RED (job run to /tmp/juris_gate_old_on_new_lawscont2.out: only the superseded PH tooth). Content ruler live vs candidate: lost_from_live=1, the superseded PH neg-control name, gained 9. PROMOTED through /api/promote expect_sha256 815b520973f61c4555a551df292a775abaff278701d9cafce980f84bbfc89314 with allow_capability_loss=yes for that one named run (job 1790621244, prev banked), live re-hashed 815b5209 130488 B, _offc twin installed (job 1790621265), nx_job_run of the promoted binary 169/169 GREEN (/tmp/juris_gate_lawscont2_promoted.out 20430 B); served /api/gate_run FAST reads exit 141 capture_truncated at 16384 B (job 1790621288), the transport cap of debt 1790615554, every tooth inside the window PASS. QUEUE for the youthsafety refs owner: candidate ref rows for the four sources are in knowledge/status/youthsafety_refs_candidates_lawscont2_20260928.txt (9-field schema, nx_filehash pins); each needs an inline mark in the same edit or the refs gate names it UNCITED 2026-09-28 measure W16 LAWS-CONTINUED second run partition and strictest line on the production table (knowledge/connect_jurisdictions.conf 77324 B sha256 efdc26fba5148fa7a34caf978175cefdf98a818fa27c83473f7b3b3759b5ded9, promoted gate 815b5209 169/169): rows 43 = admitted 31 + unsourced 12 + refused 0; admitted 31 = pending 3 (CL 2026-12-01, US-UT 13-76 2027-05-06, IN 2027-05-13) + out-of-scope 0 + SOURCED-SILENT 5 (MX LFPDPPP, PH RA 10173, PH NPC Circular 2023-04, AR Ley 25.326, DO Ley 172-13) + in-force line rows 23; the strictest line folded from the 23 = no minimum account age, consent below 18, method rank 2 verifiable_parental_consent, barred below 16 (AU s63D), unchanged by this run; on 2027-05-13 consent below stays 18. Declared answers now include PH (consent below 18 by parental_consent, the Family Code row and the NPC Advisory duty row folded) and GT (consent below 18 by parental_consent); VE, DO, AR, FR, PL, EC, CO, NG, GH, BO, HN and SV read strictest. KNOCK-ON for consumers: a Philippine or Guatemalan minor of 13 to 15 is admissible with guardian consent where the strictest line barred them, and a 16- or 17-year-old needs parental_consent rather than verifiable parental consent; consumers compiled on the pre-SOURCED-SILENT lib still REFUSE the silent rows, so PH stays strictest there until each is rebuilt on its owner's lane (the new rows need no lib change) 2026-09-28 land W16 LAWS-CONTINUED second run, HONDURAS: the Codigo de Familia as updated by the Poder Judicial documentation centre (poderjudicial.gob.hn/Cedij, knowledge/fetched/rf_5bf963bb.raw sha256 c0bd8d618d2036a8f2adb2cc7f1ca4a02319db15986d8c1a2371f544a0d89023, reforms to Decreto 102-2018) reads at Articulo 16, as reformed by Decreto 35-2013 (La Gaceta 33,222 of 6 September 2013), La mayoria de edad se obtiene al cumplirse los veintiun (21) anos, with marriage from eighteen only by authorisation of whoever holds the patria potestad; Art. 185 and 192 keep the minor's person and goods under the patria potestad. Admitted as HN Codigo-de-Familia-Art16-Art185-civil-capacity SOURCED consent below 21 by parental_consent, beside a new UNSOURCED HN data-protection-statute row (the old combined UNSOURCED row replaced), so Honduras reads strictest and its 21 now draws the strictest consent-below of the whole table: knowledge/connect_jurisdictions.conf 77324 B to 79722 B (sha256 e5268501759813f61fcfcdf5d0d8525a39e3a0ef31b62d7209c1c9a13d5d0edd), rows 44 = admitted 32 + unsourced 12 + refused 0; admitted 32 = pending 3 + out-of-scope 0 + SOURCED-SILENT 5 + in-force line rows 24; strictest line = no minimum account age, consent below 21 (was 18), method rank 2, barred below 16; on 2027-05-13 consent below stays 21. Gate: JG_HN_MAJORITY 21, the two strictest-18 teeth replaced by strictest-21 teeth, an HN neg-control (UNSOURCED beside a SOURCED civil row must not declare) and an HN consent tooth; RED 168/171 on the pre-HN table (job 1790622032: exactly the three HN-driven teeth, strictest read 18), GREEN 171/171 on the new table (job 1790622116); content ruler lost_from_live=2, both the superseded strictest-18 tooth names, gained 4; PROMOTED /api/promote expect_sha256 b76135e5b2af20af27d4081602e1de64045883364fdaace5e1ddab43b1144f56 allow_capability_loss=yes (job 1790622223, prev banked 815b5209), live re-hashed b76135e5 131080 B, _offc twin installed (job 1790622243), nx_job_run of the promoted binary 171/171 GREEN (/tmp/juris_gate_lawscont2_hn_promoted.out 20830 B). KNOCK-ON checked before landing: csu_juris_admit judges only the MINOR band, so no adult sign-up changes; the only other production-table readers are nx_connect_signup_gate (AU and US teeth only) and nx_connect_api_gate T18 (undeclared at age 30 asserts only strictest-undeclared), so no other gate pins the strictest consent value 2026-09-28 land W16 LAWS-CONTINUED second run, BOLIVIA civil capacity: the Codigo Civil (Decreto Ley 12760 of 1975) as compiled with its reforms by the Oficina Tecnica para el Fortalecimiento de la Empresa Publica (otnpb.gob.bo, knowledge/fetched/rf_321f5adc.raw sha256 0cdedd11dc779f23b5cadb60a11a8606f503ac5f2d2f3f82a8a1ec41a249274d) reads Art. 4 La mayoria de edad se adquiere a los dieciocho anos cumplidos under a note naming Ley 2089 of 5 May 2000 (Gaceta Oficial No 2220), and Art. 5 makes minors incapable of acting save through their representatives; admitted as BO Codigo-Civil-DL-12760-Art4-Art5-as-amended-by-Ley-2089 SOURCED consent below 18 by parental_consent, beside the UNSOURCED row now named data-protection-and-Ley-548-CNNA (the Organo Judicial observatory copy still printing veintiun anos is recorded there as the superseded text), so a Bolivian declarant still reads strictest. DOMINICAN REPUBLIC: the Senate historical-record text of a new Codigo Civil (knowledge/fetched/rf_b7fa079b.raw sha256 74af3bb107e19278dc25de04c7d399e0e44717ae611e603611b36f59fe6111e1) with Articulo 413 minor under eighteen is a BILL (two senators sign it, no promulgation, and its transitional article keeps Decreto Ley 2213 of 1884 in force) and is recorded in the DO UNSOURCED note, not admitted. Table 79722 B (e5268501, banked knowledge/status/connect_jurisdictions.conf.bank-lawscont2-e5268501, hash-verified) to 83423 B (846296b133cffb5df9cf65f5027fa7210dc171dfb6a5ace97aca2f281aa933a4) by three CAS edits (content token h4887863cbf7d9273, then a receipt-chained size ladder 81861, 82409, 83423). Live gate b76135e5 re-run by nx_job_run (/tmp/lawscont2_gate_bo.out 20830 B): 171/171 GREEN, partition rows 45 = admitted 33 + unsourced 12 + refused 0, admitted 33 = pending 3 + out-of-scope 0 + silent 5 + in-force line rows 25; strictest line unchanged: no minimum account age, consent below 21 (HN), method rank 2, barred below 16, and 21 on 2027-05-13. No gate change: the BO row moves no declarant outcome and no strictest value, and the generic production teeth examine it (refused 0, mirror present, folded into both walks); a BO-specific tooth would only guard against a later deletion of the UNSOURCED row. Ref candidate bo-codigo-civil appended to knowledge/status/youthsafety_refs_candidates_lawscont2_20260928.txt (4778 B). 2026-09-28 land W16 LAWS-CONTINUED second run, COLOMBIA DECLARED: Decreto 1377 de 2013 (Diario Oficial 48.834, 27 June 2013) and Ley 1581 de 2012 with Sentencia C-748 de 2011, all read from the Compilacion Juridica de la DIAN (normograma.dian.gov.co, a TLS 1.2 host; knowledge/fetched/rf_cd7278e9.raw sha256 7b6f444bd94053ef8a011d45b4f341f4c89c20c51122e473353abc207a45b427 and rf_4bac0989.raw sha256 dd9eaaedfbbef9965db38515d50a69ab4b61e7995d4cfd6424ebf1edc2c6791f), with Art. 7 cross-read on the Archivo General de la Nacion page (rf_73457293.raw): Decreto Art. 12 (compiled as DUR 1074 de 2015 Art. 2.2.2.25.2.9) lets the representante legal authorize processing of a nino, nina o adolescente's data after the minor is heard, where it serves their interes superior; C-748 section 2.9.3.4, adopted by the Segundo of its RESUELVE, reads Art. 7's proscription that way and speaks of los menores de 18 anos. Admitted as CO Ley-1581-2012-Art7-C-748-2011-with-Decreto-1377-2013-Art12 SOURCED consent below 18 by parental_consent from 2013-06-27, replacing the UNSOURCED row (its record carried in the note). Gate: three CO teeth added (const JG_CO_MINORITY), RED 171/174 on the pre-CO table (job 1790624403, exactly the three: how 3 vs 1, consent 21 vs 18, method 2 vs 1), GREEN 174/174 on the new table (job 1790624499); content ruler lost_from_live=0 gained 3 ONE-WAY-GAIN (job 1790624549); PROMOTED expect_sha256 92c7364013f2cedc6fc2d651f1701ff84a69d3df8c20135af3473979f1f9e299 with no capability-loss flag (job 1790624630; b76135e5 banked at knowledge/status/nx_connect_juris_gate.elf.bank-b76135e5 and the pre-CO source at knowledge/status/nx_connect_juris_gate.nx.bank-lawscont2-preCO), live re-hashed 92c73640 131840 B, _offc twin installed (job 1790624661), nx_job_run of the promoted binary 174/174 GREEN (/tmp/lawscont2_gate_co_promoted.out 21345 B); /api/gate_run FAST path still answers exit 141 verdict RED with capture_truncated=1 at 16384 B (debt 1790615554, the transport cap, not the gate). Table 83423 B to 87044 B (3900a745110770fa7ee0bc7b22a6474b39e3cdb51e77c8e3c32e7c29bc08f152, banked knowledge/status/connect_jurisdictions.conf.bank-lawscont2-3900a745); partition rows 45 = admitted 34 + unsourced 11 + refused 0, admitted 34 = pending 3 + out-of-scope 0 + silent 5 + in-force line rows 26; strictest line unchanged: no minimum account age, consent below 21, method rank 2, barred below 16, and 21 on 2027-05-13. KNOCK-ON for consumers (the table is data, so it applies at the next read): a Colombian declarant leaves the strictest line for consent below 18 by parental_consent, so a Colombian minor of 13 to 15 becomes admissible with the representante legal's authorization where the strictest line barred them, and an 18- to 20-year-old needs none; the best-interest duty and the minor's right to be heard are content rungs the table does not carry. Ref candidates co-decreto1377 and co-ley1581-c748 appended (candidates file 6328 B). 2026-09-28 lesson A proscription is not yet a line: Ley 1581 Art. 7 read alone (queda proscrito el tratamiento de datos de ninos, ninas y adolescentes) would have drawn barred-below-18 for Colombia, and through the strictest fold it would have barred every minor in every undeclared or tainted place; the Constitutional Court's C-748 conditioning and the regulating decree turn it into an authorization line. Read the constitutional review and the regulation before admitting any prohibition sentence as a barred band. Second lesson: a government host whose root page a search engine indexes under a gambling title (normativa.archivogeneral.gov.co, 2026-09-28) may be serving injected pages; the law page cited was checked for injected content (none) and cross-read against a second official compilation, and the row's mirror is the second host. 2026-09-28 measure W16 LAWS-CONTINUED second run, US-UT 13-71 litigation from the court's own published record: GovInfo's MODS for the case package (govinfo.gov/metadata/pkg/USCOURTS-utd-2_23-cv-00911/mods.xml, knowledge/fetched/rf_914e3359.raw sha256 2c233e173fb641003d6637d1e72a263fc1eee79c1f826252c455c3cfde775677, publisher the Administrative Office of the United States Courts, record created and last changed 2024-09-11) lists exactly two published opinions in NetChoice LLC v. Reyes et al, both by Judge Robert J. Shelby: 2024-07-22 granting the motion to dismiss Count VI of the first amended complaint, and 2024-09-10 granting NetChoice's motion for a preliminary injunction (docket 52). What the injunction restrains and for whom, any later district order and the Tenth Circuit appeal remain UNREAD (the opinion PDF reads font-less; an unchanged 2024 package proves only that no further opinion was published into it). Landed as a note on the UT 13-71 duty row, which stays four-dash, so no line moves. Also landed as notes: FR Loi 2023-566 (Legifrance failed t12-ske-signature rc=-405 four times) and PL (uodo.gov.pl failed t12-cert-pipeline rc=-210 four times on two pages). Final table 88644 B sha256 0bc194d33eadfcbb797383d13f1ed2a39d52915bd8c0139cdfbccb5032abb90f (banked knowledge/status/connect_jurisdictions.conf.bank-lawscont2-0bc194d3); live gate 92c73640 re-run by nx_job_run 174/174 GREEN (/tmp/lawscont2_gate_final2.out); partition rows 45 = admitted 34 + unsourced 11 + refused 0; strictest line no minimum account age, consent below 21, method rank 2, barred below 16. 2026-09-28 queue W16 LAWS-CONTINUED second run, OPEN at return. Eleven UNSOURCED rows keep their places on the strictest line, each with its blocker in its note: EC (LOPDP: the Registro Oficial text and the scope of the 15-year sentence under Art. 21's automated-decision heading; the Nishi index holds no official copy), FR (Loi 2023-566, Legifrance TLS -405), AR (CCyC Art. 26 is a maturity test, not an age), BO (a data-protection statute and the Codigo Nina, Nino y Adolescente, Ley 548; the civil row is now SOURCED), HN (data-protection law), VE (LOPNNA and habeas data), DO (Ley 136-03 and the Codigo Civil in force, Decreto Ley 2213 of 1884; the Senate text of a new code is a bill), SV (Decreto 144, asamblea.gob.sv TLS -212), NG (NDPA 2023, official hosts 403 and 404), GH (Act 843, fonts unmappable by nx_pdf_text), PL (lossy PDF readers, api.sejm.gov.pl TLS 1.3 BAD_FORMAT, uodo.gov.pl -210). Unread and named: PH Civil Code Art. 1327 (Official Gazette 403, Senate LDR 404 for RA 386), the text of DUR 1074 Art. 2.2.2.25.2.9 and Bolivia's Ley 2089 itself, the UT 13-71 injunction terms and appeal. Owed to the gate owner: a BO neg-control tooth (a regression guard against a later deletion of the BO UNSOURCED row). Owed to the fetcher owner (the TLS debt the table notes name, 1790461725): t12-ske-signature -405 (legifrance.gouv.fr), t12-cert-pipeline -210 (uodo.gov.pl) and -212 (colaboracion.dnp.gov.co); the ICBF compilation URLs now redirect to the portal. Owed to the refs owner: knowledge/status/youthsafety_refs_candidates_lawscont2_20260928.txt (6328 B, eight rows ph-ra6809, gt-codigo-civil, ve-codigo-civil, do-ley172-13, hn-codigo-familia, bo-codigo-civil, co-decreto1377, co-ley1581-c748; each needs an inline [key] mark in the same edit). Owed to the law-engine owner (standing order 2026-09-28, one law engine): this table is one of the five rulebooks to consolidate. Tools: the harness WebSearch hit the account's monthly spend limit mid-leg, and nx_websearch takes the query first and the scope second (web, site or trusted); nx_catalog reads it PROMOTED-SOURCELESS, so its grammar is discoverable only by probing. /api/gate_run FAST path still exit 141 at the 16384 B capture cap (debt 1790615554); nx_job_run is the reliable run. 2026-09-28 queue W16 LAWS-CONTINUED second run, BUILT AND DELIBERATELY NOT PROMOTED (declared so it is not mistaken for a forgotten build): the BO neg-control tooth (neg-control-production-a-Bolivian-declarant-whose-data-protection-row-is-UNSOURCED-gets-the-strictest-line-beside-its-SOURCED-civil-row) plus a header line landed in buildroot/runtime/_hdl_build/nx_connect_juris_gate.nx (40061 B to 40461 B, pre-CO source banked at knowledge/status/nx_connect_juris_gate.nx.bank-lawscont2-preCO), and the qualify build (job 1790625204) reads 175/175 GREEN on the live table as _build/nx_connect_juris_gate.sov.elf 91f9867493cc47c384904dddbd0ac4810efb20e18e03b3924d1718dd44d2bb49 (134576 B). The content ruler against the served 92c73640 is lost_from_live=0 but gained 54 runs (job 1790625228), 51 of them sign-up door messages (Your account was created., the door-challenge refusals) from buildroot/runtime/_hdl_build/nx_connect_juris_gate's closure member nx_connect_signup.nx, changed by the wave-16 sign-up lane after this seat's CO build at job 1790624403 (nx_absent: the phrase sits at nx_connect_signup.nx line 723, corpus_complete=1). This seat did not build or review that change, so it did not ship it inside its gate; the served gate stays 92c73640 (174/174 with the three CO teeth) and the next ship of this gate by its owner, after the sign-up lane ships its own lib, carries the BO tooth. The BO tooth is a regression guard: it is GREEN on both the old and the new table (a Bolivian declarant read UNSOURCED before the civil row and still does), so it proves the guard, not the row. 2026-09-28 retract Correction to row 1790625300: its count of 51 sign-up messages was not measured. The ruler (job 1790625228) reports gained_by_candidate=54 run occurrences (deduped=0) with 33 distinct entries in its GAINED display class; one of those is the BO tooth name, and every other one shown is sign-up door text, so all but one gained run come from the closure's nx_connect_signup.nx change. The decision in that row (withhold the promote, declare the build) is unchanged. 2026-09-28 queue INTAKE 1790633100 routed by nx_intake_route (law-core-seat, epoch 1790633062) from operator: for the law domain are we making sure that these things are tightly coupled but that we can use them for import export etc so that we can have our compliance and ethics and legal and all that nailed d -- sponsor intake-1790633100 plus2 2026-09-28 queue W18 LAW-CORE: the one law engine (legal LG4: nx_law_core law_ask over knowledge/law/, gate nx_law_core_gate 86/86, CLI nx_law on MCP) generalises this table's grammar, and topic minors-online is catalogued with YS1's four fields and method ranks. The exact migration recipe (translation once at load, LAW_HOW mapped to JUR_HOW, the method rank preserved, every nx_connect_juris_gate tooth unchanged before any consumer rebuild, the table retired through the lifecycle only after) is legal.plan row 1790633700. Not executed this leg; owner YS1, engine owner law-core (legal A). 2026-09-28 land YS1'S TABLE NOW DECIDES REAL SIGN-UPS ON THE CONNECT ALPHA (W16 ALPHA-SIGNUP-DOOR, connect.plan rows 1790635100 and 1790636600): the private sign-up door on both register paths of https://nishifamily.com/alpha/connect/ (build bdeb97bc, pid 20441, digest_match 1) runs csu_signup_check_web, whose FIRST, pure step is csu_juris_admit over jur_rules_for and jur_account_decision on knowledge/connect_jurisdictions.conf, before any budget is charged or any challenge spent; production /connect never enters it (staged 0). LIVE over the edge, promoted nx_connect_alpha_signup_gate 23/23 and nx_connect_alpha_device_gate 42/42: D1 a minor declaring no country is refused country_required with no account and no cookie; D7 an AU declarant of 13 to 15 is refused jurisdiction_barred; D8 a US declarant under 13 is refused parental_consent_required by name; neg-control D9 an AU declarant of 16 clears and D10 that account's page shows the under-18 lanes of the two-deep wall with every consent purpose OFF; DD3 on the device path refuses country_required with 403 at respond before any OPRF answer; in a real browser the CM13 journey w16signup_minor stayed on /register reading Under 18, sign-up needs the country or region you live in. OPEN: guardian consent at sign-up is not wired (fam_guardian_consent needs an existing linked member, so PARENTAL_CONSENT refuses rather than holds an account for a guardian); the age band is self-declared (CSU_ATT_SELF), no attested claim source yet; UNDER_MIN is not exercised live. For the LAW-CORE migration (legal.plan row 1790633700) the door is one more consumer of jur_rules_for and jur_account_decision, so it needs a rebuild after the translation, not an edit. |
YS2 Minor-to-minor contact only by mutual acceptance in adjacent age bands · cell LANDED · gate NO-GATE-DECLARED
| Contract | ysf_peer_may_connect · executor Organ · 1.5 u · stands on YS1 |
|---|---|
| Definition of done | ysf_peer_may_connect allows two minors only when both accepted and their age bands are adjacent (bands are conf rows), refuses a one-sided request, refuses a non-adjacent pair, never answers for an adult pair (the two-deep wall decides those), and the guardian of each minor can see the friendship; the gate proves each verdict with a neg-control |
| Matrix cell | Minor-to-minor contact only by mutual acceptance in adjacent age bands · runtime/_hdl_build/nx_connect_youthsafe.nx · LANDED decl |
| Gate | NO-GATE-DECLARED — knowledge/organ_gate.conf carries no row for nx_connect_youthsafe; declare nx_connect_youthsafe TAB <gate> and the ship loop proves it and the verdict lands here. |
| Work log | 2026-09-25 queue INTAKE 1790358601 routed by nx_intake_route (operator-seat, epoch 1790360391) from ys-pm-seat: Y1 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): youth connect around the world and have fun, one to one a -- sponsor intake-1790358601 plus2 2026-09-25 queue INTAKE 1790358602 routed by nx_intake_route (operator-seat, epoch 1790360406) from ys-pm-seat: Y2 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): no private channel between an adult and a minor -- the tw -- sponsor intake-1790358602 plus2 2026-09-25 queue INTAKE 1790358603 routed by nx_intake_route (operator-seat, epoch 1790360420) from ys-pm-seat: Y3 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): minors never harm minors -- no bullying and no inappropri -- sponsor intake-1790358603 plus2 2026-09-25 queue YS-PM routed the operator youth-safety directive (REQ 1790358600, under leg REQ 1790355000) as 10 child requests, each FILED by nx_intake_route with a sponsor row intake-ID. Map (router top1 score, gap permil): Y1 1790358601 youth connect worldwide -> connect CN14, faithsocial FS11, YS2 plus2 (FS11 83361, 12); Y2 1790358602 two-deep wall -> connect CN14, YS2 plus2 (YS2 77789, 1); Y3 1790358603 minors never harm minors -> YS2, FS11 plus2 (FS11 76880, 30); Y4 1790358604 no sexual or dating lane, device blur -> YS7 plus2 (YS7 84519, 392); Y5 1790358605 no tracking -> YS6, YS3 plus2 (FS11 60771, 181; PM override: YS6 ranked 13th at 27964 because whole-word matching does not join fingerprints to fingerprint or geolocates to geolocation); Y6 1790358606 not a babysitter -> FS11, YS4 plus2 (FS11 60016, 356); Y7 1790358607 legal lines per country -> YS1 plus2 (YS1 119703, 339); Y8 1790358608 person and family responsibility -> YS4, connect CN14 plus2 (YS4 88434, 116); Y9 1790358609 stalking -> YS3, connect CN18 plus2 (YS3 139624, 532); Y10 1790358610 report without surveillance -> YS5, FS11, connect CN7 plus1 derived (YS5 131416, 107). OPEN for the board: no YS rung owns the two-deep wall on every lane (voice, video, media, invitations) or the refusal of a dating lane to a minor -- both held only by incumbents (yw_may_channel, room_admit, ln_min); Y6 has no mechanical witness yet (a content-read clause on the YS6 census would be one). OPEN for owners: connect CN4 and faithsocial FS9 train on behavioural signals, which Y5 and Y6 constrain at least for minors (operator decision); legal and legalpractice do not fit the country table (citation verification; Utah estate documents). 2026-09-25 land nx_connect_youthsafe.nx landed (ysf_peer_may_connect composed over yw_may_channel and ln_active_lane: two minors 1:1 only by mutual acceptance inside a shared circle or the opted-in worldwide youth ring and within the band span, a far pair shares only a visible group, a minor capped below the dating lane, an adult pair abstained YSF_ABSTAIN_ADULT_PAIR; media masks and a device blur flag; block mute restrict and owner removal as the member's own rows with a durable reload; contact-request throttle and new-account cooling naming their rows; youth-group two-deep join and a leave never refused) + knowledge/connect_youthsafe.conf (every row UNSOURCED this leg so production is the strictest line: same band only, text only, blur on, no contact request) + nx_connect_youthsafe_gate GREEN 86/86 by --qualify. Bite: the far-band check widened by YSF_DEC_MAX went RED 83/85 on the two far-band teeth, restored byte-identical (lib sha256 fab15676) GREEN 85/85, then the adult-pair abstention of the board done-rule added with its tooth GREEN 86/86 2026-09-25 land nx_connect_youthsafe_gate SHIPPED: /api/build sha256 c6889cb3 (98040 B, src_path nx_connect_youthsafe_gate.nx, src_stable 1) then /api/promote expect_sha256 PROMOTED, /api/tools/register REGISTERED callable, /api/gate_run on the promoted binary exit 0 GREEN 86/86 (subject knowledge/connect_youthsafe.conf rung 1), nx_offc_install twin identical by nx_filehash cmp, admitted to knowledge/gateroster.conf as HAND-ADDED. Final sources: lib sha256 45e62b55 (26329 B), conf sha256 a83e02cf (2885 B) 2026-09-25 queue OPEN after YS2: (1) every row of knowledge/connect_youthsafe.conf is UNSOURCED so production runs the strictest line (same band only, text only, blur on, NO contact request at all) until a seat mirrors and pins this month's Roblox age-checked chat, Instagram Teen Accounts, Discord teen-by-default and Apple Communication Safety pages, lands .refs rows and flips each _src to 1; the band edges are a board decision (Roblox groups 13-15 and 16-17 would make 13 and 17 adjacent); (2) the throttle and cooling rows need a calibration (no incumbent rate row found, nx_connect_blind_abuse keeps its rate weights as code consts); (3) the guardian view of a youth friendship is the incumbent ccl_guardian_sees and is not re-proven in this gate, a circles-state tooth is owed; (4) YSF_RQ_REACH comes from ccl_circle_reach at the caller and the gate drives it synthetically; (5) the INTEGRATOR wires ysf_* into nx_connect_serve (calls returned to the leg) 2026-09-25 measure VERIFIER PARTIAL 86/86 -- gate_run on promoted c6889cb3 GREEN 86/86 exit 0 (job 1790361024), lib 45e62b55 and conf a83e02cf match the claim, offc twin identical, entry point declared at off 15863, no content IP device-id or geolocation path found, adult-minor DM walled via yw_may_channel, minor capped below dating via ln_active_lane; REFUTES the far-band and mutual-acceptance guarantee in groups: GROUP ctx returns the group verdict before the band-span and lane checks and ysf_group_may_join has no minimum size, invite or acceptance, so two far-band minors (11 and 17) or two worldwide-ring strangers get a private two-member youth group, an effective 1:1 (gate tooth same-far-band-pair-shares-a-visible-youth-group reads 4); every conf row UNSOURCED and no baseline mirrored, so no legal or best-in-class claim is admitted; bite RED 83/85 taken from the builder's receipt, not re-run 2026-09-25 land FIX-YOUTH wave 8 debt 1790361172 ACTUAL fixed in nx_connect_youthsafe: a group is judged against a ROSTER view (ysf_roster_new put size count, verified bands only, no ids, never stored) whose size and adults the lib COUNTS; ysf_peer_may_connect with no roster judges a group context as one-to-one; ysf_peer_may_connect_in judges a group below group_min_members as one-to-one (band span plus mutual acceptance) and refuses a roster that cannot hold the pair (YSF_REFUSED_ROSTER); group_min_members 3 is a DERIVED row appended to knowledge/connect_youthsafe.conf (two members are a pair; a floor at or below 2, absent or UNSOURCED reads as no floor and judges every group one-to-one); ysf_group_may_join takes the roster plus reach and world (a minor joins only with a shared circle or both in the worldwide youth ring, and that ring never carries an adult into a youth group); ysf_group_after_leave counts from the roster; YSF_RQ_ADULTS is no longer read. RED on the old lib (sha256 45e62b55) qualify 86 of 88 (no-roster group teeth actual 4 = group verdict against expected -307 FAR_BAND and -306 NO_ACCEPT); GREEN on the fix (lib 32416 B) qualify 105 of 105; nx_organ_ship SHIPPED nx_connect_youthsafe_gate b651aa85 prove GREEN (1 lost run = the superseded verdict note; behavior review knowledge/status/harness/review-youthsafe-gate-b651aa85.txt); prior gate banked nx_connect_youthsafe_gate.elf-c6889cb3-20260925. Still owed under 1790372683: grp_add composes ysf_group_may_join, room_admit and room_may_leave SUPERSEDED then ARCHIVED; ccl_channel delegation is 1790372882. NOT LIVE: imported only by its gate, api_lib youth_peer UNWIRED. 2026-09-26 land W10 SEAT FRONT-DOOR-YOUTH youth_peer WIRED on the CONNECT front door (MCP nx_connect, API /api/organ_run target=nx_connect, workflow plan-connect-frontdoor- row 7): ysf_peer_may_connect with no roster, ysf_peer_may_connect_in over a caller-supplied roster of verified bands (one character per member of the room, echoed only as the counts the engine read), policy knowledge/connect_youthsafe.conf through ysf_policy_new. The FIX-YOUTH roster fix now answers through the door: a far-band pair in a room of three is a visible group, in a room of two it is judged one to one and refused far_band (nx_connect_api_gate T24 and neg-control T25, RED on the pre-change lib, 29/29 GREEN on the NAS). Live: two same-band minors in the worldwide youth ring = lane Friendship; a far-band pair one to one = -307 far_band on row peer_band_span; two adults = abstain_adult_pair, decided 0. Nothing stored, no member data read. Lib nx_connect_api_lib.nx sha256 26d83c5b, live nx_connect_api.elf sha256 2c2b2521. This supersedes the NOT LIVE note of the 1790374975 row for the MCP door; the alpha HTTP door waits on the ALPHA rebuild. 2026-09-26 land W11 SEAT CIRCLES-CONSOLIDATE (debt 1790372882): ysf_peer_may_connect is now the rule the circles channel answers with -- nx_connect_circles ccl_channel hands every minor-to-minor pair to it over a request filled from the circles rows (youth band rows set by ccl_set_youth_band, the policy installed by ccl_set_youth_policy) and names its refusals CCL_FAR_BAND, CCL_YOUTH_BAND and CCL_YOUTH_POLICY; with the production conf (4 bands, span 0 UNSOURCED) a same-band pair still befriends and a first-to-last-band pair is refused one to one exactly as ysf refuses it (circles gate SHIPPED 6c9b9dc3, 95/95; RED 85/95 on the planted old decision). YS4: fam_guardian_consent is the door a guardianship comes into being through, only for an adult the youth named and only inside their own verifiable consent (family gate SHIPPED 42474d04, 94/94; RED 88/94 on the old code). Detail and hashes on connect.plan rows 1790440700 to 1790440706. 2026-09-26 land W10 ALPHA-REBUILD: youth_peer (YS2), antistalk_discover (YS3) and family_consent (YS4) now answer behind the ALPHA HTTP door too, https://nishifamily.com/alpha/connect/api/v1/<verb> on build ac638880 (the in-process ca_dispatch over api lib 26d83c5b), supplementing rows 1790439080 to 1790439082 (MCP door). Proven over the edge by nx_connect_alpha_api_gate b21e7939: RED 22/32 on the previous alpha e8ef423a (all three 501 not_yet_wired, job 1790440293) and GREEN 32/32 on ac638880 (job 1790441771): same-band minors 200 allowed 1, far-band pair 200 far_band allowed 0 (neg-control), antistalk shown and a blocked viewer not shown (neg-control), a linked guardian consents and a non-guardian is refused (neg-control); every reply stored 0. Visual review of the alpha pages after this build is UNMEASURED; production /connect does not mount the api door. |
YS3 Anti-stalking without tracking · cell LANDED · gate NO-GATE-DECLARED
| Contract | ast_may_discover · executor Organ · 2 u · stands on nothing |
|---|---|
| Definition of done | ast_may_discover shows a member only to accounts that share a circle, a block makes the blocker invisible to the blocked account (no profile, presence or search hit), request rates are throttled by a conf rate, no location, presence or friend list of a minor is ever exposed, and re-contact through a new account is refused by the personhood claim, never by an IP or device record; the gate proves each with a planted stalker fixture |
| Matrix cell | Discovery only inside shared circles, a block hides existence (anti-stalking) · runtime/_hdl_build/nx_connect_antistalk.nx · LANDED decl |
| Gate | NO-GATE-DECLARED — knowledge/organ_gate.conf carries no row for nx_connect_antistalk; declare nx_connect_antistalk TAB <gate> and the ship loop proves it and the verdict lands here. |
| Work log | 2026-09-25 queue INTAKE 1790358605 routed by nx_intake_route (operator-seat, epoch 1790360448) from ys-pm-seat: Y5 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): safety without tracking. The server stays content-blind ( -- sponsor intake-1790358605 plus2 2026-09-25 queue INTAKE 1790358609 routed by nx_intake_route (operator-seat, epoch 1790360509) from ys-pm-seat: Y9 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): prevent stalking without tracking. Discovery happens only -- sponsor intake-1790358609 plus2 2026-09-25 land nx_connect_antistalk.nx (ast_may_discover) in buildroot/runtime/_hdl_build, 26546 B sha256 b6b61d33: ONE predicate answers all 9 read paths (search, circle list, group roster, event roster, profile, message, invite, reconnect, contact request); a block hides the pair both ways and is keyed on the account AND on the blocked member's CN18 claim id, so a new account presenting that claim is hidden too and an account with no claim cannot reach a member holding a person-level block; every hidden reason maps to one public answer (no retaliation signal); a non-guardian adult never singles a minor out and sees one only in a vouched roster; a minor's presence, last-seen, location and friend list are omitted; throttles per sender and per recipient are conf rows and a sender asks a recipient once. nx_connect_antistalk_gate GREEN 94/94 via nx_sov_build_run --qualify (job 1790360523); planted defect (claim match disabled in ast_block_why) RED 84/94 naming exactly the 10 new-account teeth (job 1790360574), restored to the same sha. Table knowledge/connect_antistalk.conf 824 B, all 3 rows UNSOURCED, so production holds the strictest line (one pending request at a time, adult location none). The personhood lib is read not imported (wave 2 in flight): the caller passes the claim id bytes it verified with cvh_live_row 2026-09-25 land SHIPPED nx_connect_antistalk_gate through nx_organ_ship (job 1790360643): build sha b0027b0a, PROVE GREEN 94/94 on the restored source (lib sha b6b61d33, re-hashed after the bite), first promote live_sha = staged_sha b0027b0a, _offc twin installed from the promoted root, registered callable; admitted to knowledge/gateroster.conf (hand-added, grammar of the franking row). The lib has no binary by design; its adoption is the INTEGRATOR composing ast_may_discover on every read route 2026-09-25 queue OPEN after the YS3 land: (1) all 3 rows of knowledge/connect_antistalk.conf are UNSOURCED (throttle counts and windows per sender and per recipient, the adult coarse location band) -- each needs a calibration or a primary source read this month, and until then production holds the strictest line (one pending request per sender and per recipient, adult location none); (2) best-in-class pages UNREAD this leg: Signal's block article answered 403 to nx_research_fetch (bot wall, nothing saved), Instagram's block-and-new-accounts help and Snapchat's teen location defaults were not fetched -- mirror, pin and read them before the board claims the exceed; (3) INTEGRATOR: compose ast_may_discover on every read route of nx_connect_serve, filling AST_RQ_* from ccl_circle_reach, ccl_band, ccl_ring_adm, ccl_group_ok, ccl_channel, ccl_guardian_pair and the viewer's CN18 claim id, ast_block and ast_unblock on the block routes, ast_request and ast_answer on the contact-request routes, ast_presence_out, ast_last_seen_out, ast_location_out and ast_friends_out on every member render, and a durable row per block and per request (the lib state is in memory) -- the gate drives the lib on synthetic values, so the wiring against a live circles state is UNVERIFIED; (4) the cross-account guarantee holds for any account presenting the SAME claim id, but CN18 cvh_issue mints a fresh random claim id per claim, so a blocked person who earns a SECOND claim under a new account (two new in-person vouches) is not linked -- CN18 needs a stable per-person handle, or the vouch path must refuse a person their circle already holds a claim for, before one person, one claim is true across accounts 2026-09-25 measure VERIFIER CONFIRMED-WITH-FINDING 94/94 -- my own /api/gate_run (job 1790360911) GREEN 94/94 on the promoted gate b0027b0a (root and _offc hash-identical), lib b6b61d33 26546 B, ast_may_discover declared, bite RED 84/94 read in job 1790360574, 3 claimed journal rows present, no content read, no network address or device input, no geolocation, adult-minor single-out refused; FINDING from the source (runtime UNMEASURED): ast_block leaves the blocked member's PENDING request standing and ast_over counts it, so under today's strictest line (UNSOURCED recipient row = one pending per recipient) a stalker's one unanswered request locks every other sender out of the victim, and once the victim blocks, that request is hidden from the victim by the same predicate, so it cannot be answered -- the block should retire the pending pair (owed to YS3); also the blocker still sees the blocked person's NEW account (the person-level check runs only when the target is the blocker), and the gate hand-copies SA_AGE_JTI_BYTES as 16 2026-09-25 land FIX-YOUTH wave 8 debt 1790372694 parts 2 and 3 fixed in nx_connect_antistalk (part 1, the one-pending lock, stays the declared strictest line of the UNSOURCED recipient row, NOT-AN-ISSUE per R3b): ast_block now answers the pending requests between the pair at once, both ways (ast_clear_pending, the rows stay as history), and ast_over skips on the recipient column any row whose sender the recipient blocked, so a blocked stalker neither waits in the victim's queue nor holds the victim's recipient throttle (strictest line and sourced window both); rq carries the TARGET's live claim (AST_RQ_TCLAIM and AST_RQ_TCLAIM_N, AST_RQ_SLOTS 10 to 12) and ast_block_why matches it against the viewer's own claim-bearing blocks (AST_WHY_BLOCKER_PERSON 12), so the blocker neither sees nor requests an account presenting the blocked claim. RED on the old lib qualify 102 of 107 (pending row still 1; the third sender -7 THROTTLED_RECIPIENT under the strictest line and in the sourced window; the new account VISIBLE to the blocker and requestable 0 OK); GREEN on the fix (lib 29119 B) qualify 111 of 111 with neg-controls (without a block the stalker still throttles; a full sourced window still refuses the next sender; the blocker still sees another person) and binding teeth tying the gate slots to AST_RQ_TCLAIM, AST_RQ_TCLAIM_N and AST_RQ_SLOTS; nx_organ_ship SHIPPED nx_connect_antistalk_gate d147fff8 prove GREEN content GREEN; prior gate banked nx_connect_antistalk_gate.elf-pre-fixyouth-20260925 (96264 B). Still owed (SPRAWL, 1790372875): YSF_SET_BLOCK, CCL_F_BLK and the serve CS_BLOCKED slot retire onto ast_block; the request rows carry no sender claim, so a blocked person's OTHER account's already-pending request is not cleared by an account-level block. NOT LIVE: imported only by its gate, api_lib antistalk_discover UNWIRED. 2026-09-26 land RESUME-YOUTH wave 10 closed the two legs wave-8 FIX-YOUTH left open (full rows on connect.plan CN15 and CN18 at 1790438160 and 1790438440): (4) nx_connect_faith cfa_discover now composes ast_may_discover on the search path for every candidate, the owner's first composer outside its gate -- faith gate SHIPPED 675a20f1 (qualify 67/67 GREEN, planted revert 65/67 RED, served gate_run GREEN), debt 1790372702 stays OPEN for csh_visible, csh_share_visible and ccl_ask; (5) nx_connect_personhood issues a youth band only with the guardian's own act (a live nx_connect_family consent by a circles-linked guardian holding a live adult claim), so two colluding verified adults can no longer mint a youth band from vouches alone -- personhood gate SHIPPED 0115f7c1 (65/65 GREEN, 60/65 RED on the lib without the check, served gate_run GREEN), debt 1790359971 EATEN (job 1790438444 DEBT-EATEN at_idx 4475); residual caller-asserted ccl_link_guardian stays under 1790372549. Neither lib is served yet (faith cfa_discover and personhood have no serving caller). 2026-09-26 land W10 SEAT FRONT-DOOR-YOUTH antistalk_discover WIRED on the CONNECT front door (workflow plan-connect-frontdoor- row 8): ast_may_discover over a synthetic viewer and target (and each person's other account) with the block rows the caller describes, one-byte claim ids built per call; the FIX-YOUTH claim-bearing block now answers through the door both ways (blocked_person, blocker_person, no_claim), and viewer_told carries the one public answer (ast_public_answer) so a block reads as a stranger (nx_connect_api_gate T26 and neg-control T27, RED on the pre-change lib, GREEN on the NAS). Live: two adults sharing the searched context = visible 1 shown; the target blocked the viewer = visible 0 why blocked viewer_told 0. Discovery only: the throttle rows and ast_request are not behind the door. This supersedes the NOT LIVE note of the 1790375110 row for the MCP door. 2026-09-26 land W14 SEAT LISTING-AND-COUNTRY: ast_may_discover now decides listing discovery on the CN17 service and share board, not only the contact request. nx_connect_service csh_may_see asks it on the circle-list path for every need and share listing: a block hides existence both ways and a match across it reads CSH_INVISIBLE (the answer a stranger gets, no retaliation signal); a non-guardian adult who shares only an opt-in ring never learns a minor's listing exists (AST_WHY_MINOR_OPEN_RING) while the minor's linked guardian and a peer minor still do, and inside an in-person vouched ring the two-deep wall still answers WALLED; with no antistalk state installed nothing is listed. Service gate RED 155/171 (job 1790459935), GREEN 171/171 (job 1790460315), SHIPPED 19e5814c; the served share_match verb carries it (nx_connect_api SHIPPED 7980400c; api gate SHIPPED 9afbeeb7, T23 INVISIBLE on the worldwide ring and WALLED in the vouched ward). Debt 1790457815 EATEN, superseded by 1790461582 for the remaining faith discovery rule (cfa_discover). Detail on connect.plan CN17 row 1790461700. 2026-09-28 land W16 SEAT FAITH-RANKING closed the last discovery rule outside the owner (debt 1790461582, the item row 1790461702 left open): nx_connect_faith cfa_discover is ARCHIVED (knowledge/retired/nx_connect_faith.cfa_discover-20260928-wave16.nx, mining receipt on connect.plan CN15) and faith is a RANKING signal over exactly the members nx_connect_antistalk ast_may_discover shows on the search path (cfa_rank_visible): a member the owner hides stays hidden whatever their faith, a withdrawn-consent member contributes no signal and ranks where a member who never declared ranks, and a minor never surfaces to an unrelated adult (the owner's AST_WHY_MINOR_ADULT, with the guardian neg-control). Faith gate SHIPPED 4674e517, served /api/gate_run GREEN 96/96 (job 1790615054); RED 71/90 on the old lib (job 1790613393) and 74/96 on a planted revert to cfa_discover (job 1790614445). FOR THE OWNER OF ast_may_discover: the retired peer band also kept adults out of a MINOR's faith query (a minor never listed an adult sharing their ring); the owner shows those adults on the search path, so that half is NOT carried -- if youth search should not list adults at all, it is a rule for ast_may_discover where every read path inherits it, never a second rule in one lane. NOT LIVE: the ranking has no serving caller (request to wave 17 FRONTDOOR-FINISH, connect.plan row 1790615101). |
YS4 Guardian consent and visibility without reading a message · cell LANDED · gate NO-GATE-DECLARED
| Contract | fam_guardian_consent · executor Organ · 1.5 u · stands on YS1 |
|---|---|
| Definition of done | fam_guardian_consent opens a minor's account and lanes only with guardian consent below the country's consent age read from jur_rules_for, shows the guardian who the minor is connected with and never message content, and withdrawing consent closes the minor's lanes at once; graded against Instagram parent insight and Discord Family Center |
| Matrix cell | Guardian consent and visibility without reading a message · runtime/_hdl_build/nx_connect_family.nx · LANDED decl |
| Gate | NO-GATE-DECLARED — knowledge/organ_gate.conf carries no row for nx_connect_family; declare nx_connect_family TAB <gate> and the ship loop proves it and the verdict lands here. |
| Work log | 2026-09-25 queue INTAKE 1790358606 routed by nx_intake_route (operator-seat, epoch 1790360466) from ys-pm-seat: Y6 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): the platform is not a babysitter -- no monitoring. No hum -- sponsor intake-1790358606 plus2 2026-09-25 queue INTAKE 1790358608 routed by nx_intake_route (operator-seat, epoch 1790360495) from ys-pm-seat: Y8 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): responsibility sits with the person and their parents or -- sponsor intake-1790358608 plus2 2026-09-25 land nx_connect_family.nx (fam_guardian_consent) in buildroot/runtime/_hdl_build, 28805 B sha256 04cc22fb, composes nx_connect_circles for band, guardian link, reach, relationships and the channel (narrows, never widens) + nx_connect_family_gate GREEN 82/82 via nx_sov_build_run --qualify; planted defect (fam_front answers FAM_OK where consent is missing) RED 78/82 naming exactly the four lane teeth, restored to the same sha GREEN 82/82; table knowledge/connect_family.conf 2530 B (statement v1, 6 plain-language say lines, 3 settings each defaulting to its strictest value, 4 who kinds, 2 method rows UNSOURCED so production refuses FAM_NO_SOURCED_METHOD by name and a minor opens nothing beyond the guardian today); jur_rules_for ABSENT-PROVEN over buildroot/runtime (26602 files corpus_complete=1) so the lib publishes the FAM_JR_ slot interface and falls to the strictest line 2026-09-25 land SHIPPED nx_connect_family_gate: /api/build (src_path names the target) sha256 089602ba 133608 B, /api/promote with expect_sha256 PROMOTED, /api/tools/register REGISTERED callable, nx_offc_install promoted installed=1, admitted to knowledge/gateroster.conf (comment row plus name); /api/gate_run on the served binary GREEN 82/82 exit 0; knowledge/connect_family.conf now 2953 B with method rank 2 citing 16 CFR 312.5(b)(2)(i)-(v), read today from knowledge/fetched/cmp_youthsafety_coppa_312_5.xml 9165 B sha256 d91d6106 (eCFR versioner text as of 2026-09-01), so production under the strictest line demands rank 2 and a consent by it answers FAM_OK, after which the youth peer 1:1 reads FAM_SETTING_OFF until the family turns it on 2026-09-25 queue OPEN: (1) YS1 jur_rules_for is absent, so no country row reaches fam_guardian_consent yet and the integrator passes 0 as *i64 (the strictest line) until YS1 fills FAM_JR_SOURCED, FAM_JR_CONSENT_AGE and FAM_JR_METHOD; (2) the YS-BOARD seat owes a refs pin for cmp_youthsafety_coppa_312_5.xml (sha256 d91d61066659f060cd7de0f0612c0f95c534e57b69ea3c5682c38b97e48ebbcb) and a watch row for fam_guardian_consent; (3) rank 1 email_plus stays UNSOURCED, its paragraph unread; (4) the media tier is recorded and shown to the youth but enforced nowhere yet, the media send path must read fam_setting FAM_SET_MEDIA; (5) the family state is in memory, the consent and history rows need the integrator's append-only persistence; (6) the best-in-class vendor pages (Instagram Supervision, Apple Screen Time Communication Limits, Messenger Kids dashboard, Ask to Buy) were named from the brief, NOT mirrored, UNREAD; (7) groups in the guardian view come from the caller's roster (nx_connect_group_lib), not composed in the lib 2026-09-25 measure VERIFIER CONFIRMED-WITH-FINDINGS 82/82 served gate_run GREEN exit 0 (job 1790360967), lib 28805 B sha256 04cc22fb matches, entry point declared, 3 journal rows present, COPPA mirror pin d91d6106 matches and (b)(2)(i)-(v) read in it; lib reads no content, IP, device or location and types no age literal. Findings: fam_guardian_consent has no HOLD_SELF check, so a guardian can re-take control after age-up when the caller passes a lower age_lo or no jurisdiction row (PLAUSIBLE, not exercised); email_plus is 312.5(b)(2)(viii) inside the same mirror, so UNSOURCED is a choice not a gap; served-binary lib freshness not rebuilt by this verifier; bite not re-run; gate fixtures are in-memory, no /tmp dir 2026-09-25 land FIX-YOUTH wave 8 debt 1790372710 fixed in nx_connect_family: fam_guardian_consent reads FAM_R_HOLDER after the member, minor, guardian and statement checks and returns the new named refusal FAM_SELF_HELD (0 - 118) when the youth holds their own settings, before any write, so a linked guardian can no longer retake control after fam_age_up (fam_age_up itself already refused re-entry with FAM_ALREADY). RED on the old lib qualify 81 of 84 with the referee's own fixture values (fam_age_up girl at FG_AGE, then fam_guardian_consent girl gdad jrs FG_AGE - 1 FG_M_WEAK: returned FAM_OK, holder became GUARDIAN actual 0 expected 1, and the knock-on guardian view reopened actual 3 expected -110); GREEN on the fix (lib 29209 B) qualify 85 of 85, the same call before the age-up still FAM_OK (the existing neg-control tooth), the refused retake names FAM_SELF_HELD and the holder stays SELF; nx_organ_ship SHIPPED nx_connect_family_gate e9079c1d prove GREEN content GREEN; prior gate banked nx_connect_family_gate.elf-pre-fixyouth-20260925 (133608 B). Still owed (R5c, debt 1790372889): the family strictest line versus jur_rules_for for ages 13 to 17. NOT LIVE: imported only by its gate, api_lib family_consent UNWIRED. 2026-09-26 land W10 SEAT FRONT-DOOR-YOUTH family_consent WIRED on the CONNECT front door (workflow plan-connect-frontdoor- row 9): fam_guardian_consent over a synthetic family of two (the youth and one adult, linked as guardian when linked is 1, in a circle state with no ring) under knowledge/connect_family.conf and a jurisdiction row the caller states the way juris_rules answers it; self_at builds the take-control history through fam_age_up, and an impossible history (a minor taking control under the strictest line) is refused history_not_built with no decision. The FIX-YOUTH FAM_SELF_HELD fix now answers through the door (nx_connect_api_gate T28 and neg-control T29, RED on the pre-change lib, GREEN on the NAS). Live: the linked guardian of a twelve-year-old by the sourced rank 2 under the strictest line = consented, consent live, guardian holds; after the youth took control at 16 under a sourced row a guardian claiming 15 = -118 self_held, holder self. Still owed: debt 1790372889 (the family strictest line versus jur_rules_for for ages 13 to 17). This supersedes the NOT LIVE note of the 1790375560 row for the MCP door. |
YS5 Abuse reports verifiable inside end-to-end encryption · cell LANDED · gate NO-GATE-DECLARED
| Contract | mfr_report_verify · executor Organ · 2 u · stands on nothing |
|---|---|
| Definition of done | mfr_report_verify accepts a reported sealed message only when its franking tag verifies against the reported sender, refuses a forged or altered report, and the server reads no unreported message; the gate proves a real report accepted, a forged one refused and an altered one refused |
| Matrix cell | Abuse reports verifiable inside end-to-end encryption (message franking) · runtime/_hdl_build/nx_connect_franking.nx · LANDED decl |
| Gate | NO-GATE-DECLARED — knowledge/organ_gate.conf carries no row for nx_connect_franking; declare nx_connect_franking TAB <gate> and the ship loop proves it and the verdict lands here. |
| Work log | 2026-09-25 queue INTAKE 1790358610 routed by nx_intake_route (operator-seat, epoch 1790360523) from ys-pm-seat: Y10 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): report abuse without surveillance. A recipient can repor -- sponsor intake-1790358610 plus1 2026-09-25 measure VERIFIER PARTIAL 40/40 -- live /api/gate_run job 1790360765 exit 0 GREEN 40/40 on promoted gate; lib sha e16a94cc 10925 B and gate sha a38b34fb 14048 B match the claim; mfr_report_verify declared at off 9675; sizes recomputed by hand (env 296 = 32+216+16+32, record 360, report 344) agree; lib reads no content beyond the TF tail and takes no IP, device id, location or profile; no age, rate or period literal; statutes honestly UNSOURCED. DEFECT: 7 sys_mmap and 0 sys_munmap in the lib (sys_munmap exists in nx_syscalls) -- mfr_relay leaks 2 mappings per relayed message and mfr_report_verify 3 per report, unbounded in a serving daemon; must be fixed before the integrator wires it. HAZARD UNVERIFIED: cseal_nonce is [0000][seq] with no direction bits, so the sender's frank seq must equal the store seq on receive and two senders under one conversation key at one seq would reuse a nonce. Bite receipts (RED 37/40 job 1790360337) not re-run by this verifier. A stray byte A precedes receive-opens-message-1 in the gate output. 2026-09-26 land RESUME-CRYPTO-REALM wave-10 seat finished nx_connect_franking (debts 1790372740 leak and 1790372741 nonce, which superseded 1790361185; review R4b). The wave-8 seat had landed per-sender keys, unmapped the lib's own large buffers and rebuilt the gate, but never promoted or journaled it, and N relays were still NOT constant. MEASURED on that predecessor lib (5ed0f59c) with new absolute teeth: qualify job 1790437452 passed 60/63 verdict=RED, relay grew 3072 KB and receive 6400 KB over 128 rounds at 4096 B, and 7231 relays of a 1-byte message grew 183016 KB, because every HMAC ran through the allocating hmac_sha256 (two 512 B SHA contexts mapped and the pads bumped on every call, none freed, about 26 KiB of VmSize per call) and a buffer at or under NXA_SMALL_MAX (256 B) is an arena bump that sys_munmap never returns. FIX (buildroot/runtime/_hdl_build/nx_connect_franking.nx, 16439 B sha256 917b107f): every per-call buffer is one real mapping through mfr_map (at least NXA_SMALL_MAX + 1 bytes, the allocator's own bound) unmapped on every exit, and every HMAC runs through nx_hmac's caller-owned hmac_sha256_workspace inside such a mapping (mfr_hmac). The gate (24978 B sha256 f59cb042) adds an HMAC KAT against the incumbent hmac_sha256 with a neg-control, a fixture tooth that a 1-byte stamped record sits under the arena bound, and three ABSOLUTE server-path teeth. RED on the planted original lib (sealed and opened under the shared conversation key, rec and inner never unmapped; sha256 e4eb687b): job 1790437795 passed 53/63 (the two-senders-one-id neg-control shares a keystream, the shared key opens a record, a relabelled record opens, and all six leak teeth fail). GREEN: job 1790438062 63/63, relay 0 KB, 7231 small relays 0 KB, receive 256 KB, frank 1280 KB against its AEAD-only control of 1024 KB. SHIPPED by nx_organ_ship job 1790438861: gate sha 36894c76 promoted over c798dffe, _offc twin installed, registered; loss approved allow_loss_v1 90b48814 (the old conversation-key-opens tooth, superseded by the per-sender key teeth); behaviour reviewed in knowledge/status/harness/review-franking-gate-20260926.review (sha256 320d5ff1). NONCE: the cseal nonce bytes are unchanged; as the R4b referee ruled, the key schedule owns uniqueness, so each sender seals under HMAC(ck, label, sender) and two senders at one client msg id never share a (key, nonce) pair (neg-control GREEN, RED on the original). OPEN: the frank path still grows about 8 KiB per call inside cseal_seal and the ChaCha20-Poly1305 core, and cseal bumps 32 B of nonce and aad per call (new debt row for those owners); store dedup by (sender, client msg id) rides consolidation debt 1790372726; per-device keys and extracting the nx_mls_group key schedule into an importable lib stay owed. 2026-09-26 queue RESUME-CRYPTO-REALM debt outcomes, each read back from its job artifact: 1790372740 (leak) DEBT-EATEN job 1790439193; 1790372741 (nonce) DEBT-EATEN job 1790439185, superseded by 1790438989 (per-device keys, the nx_mls_group schedule extracted into an importable lib, store dedup by sender and client msg id riding 1790372726); dependency growth measured by the franking gate filed as 1790439040 (hmac_sha256 about 26 KiB per call, cseal_seal about 8 KiB per call inside the ChaCha20-Poly1305 encrypt, 32 B nonce and aad bumps), for the nx_hmac, nx_connect_seal and AEAD owners. The franking lib still has no importer but its gate (grep corpus_complete=1), so franking_verify stays not_yet_wired in nx_connect_api_lib and nothing is live on the alpha from this leg. 2026-09-26 land W13 SEAT LEAKS: the franking SENDER and RECIPIENT paths no longer grow VmSize. mfr_frank and mfr_receive seal and open through nx_connect_seal's new caller-owned workspace (cseal_seal_ws and cseal_open_ws over the incumbent arena AEAD, one mapping per call): nx_connect_franking_gate RED on the old lib (qualify job 1790455105: 1280 KB over 128 franks at 4096 B, 58112 KB over 52428 franks at 1 B, 57344 KB over 52428 receives at 1 B, mapping count 6 to 7) and GREEN 88/88 on the new with the chat-store migration of another seat landed beside it (job 1790456802: 0 KB, 0 KB, 0 KB, maps 6 to 6; workspace KAT byte-identical to cseal_seal at 1, 63, 64, 65 and 4128 bytes). The franking gate is NOT re-shipped by this seat (its source also carries the store seat's migration, whose content adjudication is theirs); the seal gate shipped de950bbb. Detail on connect.plan CRYPTO-LEAK rows 1790456950 to 1790456952; debts 1790456844 and 1790456748. |
YS6 No-tracking census over the connect serving path · cell WATCHING · gate NO-GATE-DECLARED
| Contract | cnt_tracking_census · executor Organ · 1.5 u · stands on nothing |
|---|---|
| Definition of done | A census over the connect serving path refuses any IP geolocation lookup, device fingerprint or cross-session behavioural profile store, names every offender, and is bite-proven with a planted lookup that turns it RED; wired so a build that adds tracking is refused |
| Matrix cell | No tracking: no IP geolocation, no behavioural profile, no device fingerprint · runtime/_hdl_build/nx_connect_notrack.nx · WATCHING decl |
| Gate | NO-GATE-DECLARED — knowledge/organ_gate.conf carries no row for nx_connect_notrack; declare nx_connect_notrack TAB <gate> and the ship loop proves it and the verdict lands here. |
| Work log | 2026-09-25 queue INTAKE 1790358605 routed by nx_intake_route (operator-seat, epoch 1790360448) from ys-pm-seat: Y5 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): safety without tracking. The server stays content-blind ( -- sponsor intake-1790358605 plus2 |
YS7 Sensitive-image flag for the device, never a server scan · cell WATCHING · gate NO-GATE-DECLARED
| Contract | cmf_device_blur_flag · executor Organ · 1 u · stands on YS2 |
|---|---|
| Definition of done | An attachment sent to or by a minor carries a flag telling the receiving device to blur it until tapped, the server never inspects the image, and an adult lane is unaffected; graded against Discord's blurred sensitive content for teens, where the rivals lead today |
| Matrix cell | Sensitive-image protection for minors on the device · runtime/_hdl_build/nx_connect_mediaflag.nx · WATCHING decl |
| Gate | NO-GATE-DECLARED — knowledge/organ_gate.conf carries no row for nx_connect_mediaflag; declare nx_connect_mediaflag TAB <gate> and the ship loop proves it and the verdict lands here. |
| Work log | 2026-09-25 queue INTAKE 1790358604 routed by nx_intake_route (operator-seat, epoch 1790360433) from ys-pm-seat: Y4 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): no sexual or dating lane for minors, and media limits. A -- sponsor intake-1790358604 plus2 2026-09-25 retract The first rank named YS7 DARK-CONTRACT: its watch pointed at nx_connect_youthsafe.nx, which a builder landed during admission without that symbol, so the cell would have read as a lost build; the rung and its matrix row were repointed to the unbuilt organ runtime/_hdl_build/nx_connect_mediaflag.nx symbol cmf_device_blur_flag, and the next rank reads it OPEN with no DARK flag |
dossiers=7 cells_joined=7 no_matrix_row=0 (sum 7) gates_recorded=0 gates_unrecorded=0 no_gate_declared=7 (sum 7 of cells_joined) evgates=UNSTAMPED
Capability comparisons
Compare the field, search individual capabilities and open their source and adoption evidence. Documented presence does not establish comparative quality.
Position map — centrality and distinctiveness
The four-quadrant map the field uses for brand strategy (Dawar and Bagga, HBR June 2015), re-derived from this matrix on every publish. Centrality is the share of the category's feature mass a player covers, each feature weighted by how many hold it; distinctiveness is the average lead over each rival on the rows the player holds; breadth is the depth-weighted share of the whole matrix (the bubble); depth is how deeply the rows held are held; momentum is the day-over-day move off the spine (green rising, red falling, grey until day two); the dashed path runs first day → previous day → today. Dividers are the category means. Axes are fitted to the field of play, so read the tick numerals, not the frame. Rival marks are documented presence, so a rival's position reads the record, never its quality. The picture grades its own readability below; the table beside it is the same data for a screen reader or a second method.
Rows. 18 feature rows mapped of 19 matrix rows; 1 substrate rows (kernels, bounds and instruments the plan's rungrole marks substrate) are the estate's scaffolding, not category features, and stay off the map
Views. 2D cut: centrality, distinctiveness · 3D cube: centrality, distinctiveness, breadth · axes registered: centrality, distinctiveness, breadth, depth, momentum · a board picks its own in
knowledge/compare/youthsafety.cdmap (cut|x|y, cube|x|y|z); absent = the HBR defaultsbubble area = breadth · ring = momentum (green rising, red falling, grey until day two) · dashed = category means · axes fitted to the field of play: centrality 200–1000, distinctiveness 0–600 of 0–1000 permil (the full range put every player in one corner)
readability of the 2D cut, self-graded by the layout ruler: label overlaps 0 · labels over marks 0 · off-canvas 0 · unresolved labels 0 · mark overlaps 0 (a fact of the data: two players that close are that close) · data spread 726 permil of the plot · quadrant words unseated 0
text contrast, measured with wcag2-ratio (floors from contrast.conf), light theme: labels 16.24 (floor 4.50) · notes 16.24 (floor 4.50) · quadrant words 5.89 (floor 4.50) · tick numerals 5.89 (floor 4.50) · axis titles 5.59 (floor 4.50) · dark theme: labels 13.78 (floor 4.50) · quadrant words 5.55 (floor 4.50) · axis titles 5.97 (floor 4.50) · dark classes under their floor 0 (one figure serves both themes: a dark shortfall is a token to fix, never a class to hide) · classes refused under their floor 0 (a refused class is not drawn; the scale classes are measured, never hidden) · export: SVG PNG (receipt, rendered by the estate's own rasteriser from this page)
readability of the 3D cube, self-graded by the layout ruler: label overlaps 0 · labels over marks 0 · off-canvas 0 · unresolved labels 0 · mark overlaps 4 (a fact of the data: two players that close are that close) · data spread 203 permil of the plot
10 panels over 5 registered axes, every pair once (the lower axis on x, the higher on y) · each panel fitted to its own field of play, first and last tick numerals shown · no labels in a small cut, the legend names the colours; the grade below reports the mark terms only (MM summed over the panels, spread averaged)
readability of the small multiples, self-graded by the layout ruler: label overlaps 0 · labels over marks 0 · off-canvas 0 · unresolved labels 0 · mark overlaps 20 (a fact of the data: two players that close are that close) · data spread 549 permil of the plot
| Player | Quadrant | centrality | distinctiveness | breadth | depth | momentum | Rows held | Days on spine | First seen |
|---|---|---|---|---|---|---|---|---|---|
| Nishi | Aspirational | 981 | 520 | 629 | 708 | 0 since 2026-09-28 | 16 | 3 | 2026-09-25 |
| InstagramTeen | Mainstream | 777 | 166 | 222 | 500 | 0 since 2026-09-28 | 8 | 3 | 2026-09-25 |
| Discord | Mainstream | 796 | 185 | 240 | 481 | 0 since 2026-09-28 | 9 | 3 | 2026-09-25 |
| Roblox | Peripheral | 629 | 120 | 166 | 500 | 0 since 2026-09-28 | 6 | 3 | 2026-09-25 |
| Snapchat | Peripheral | 444 | 166 | 148 | 533 | 0 since 2026-09-28 | 5 | 3 | 2026-09-25 |
| Yubo | Unconventional | 351 | 240 | 129 | 777 | 0 since 2026-09-28 | 3 | 3 | 2026-09-25 |
| MessengerKids | Mainstream | 685 | 134 | 166 | 428 | 0 since 2026-09-28 | 7 | 3 | 2026-09-25 |
| Day | Matrix rows reviewed | Players recorded |
|---|---|---|
| 2026-09-25 | 18 | 7 |
| 2026-09-28 | 18 | 7 |
| 2026-10-08 | 18 | 7 |
players 7|matrix rows 18|feature mass 54|centrality mean 666|distinctiveness mean 218|axes 5|spine days 3 (shown 3)|rows written today 0|readability defects 2D 0 cube 0|spine knowledge/status/cdmap/youthsafety.spine
How to read this evidence. A Nishi source mark records whether the named symbol is declared in the selected source file. It does not establish working behavior or accepted delivery. A watching tag names an expected source entry; discovering it updates source coverage only. A dark tag means the file exists but the named symbol was not found: inspect the source and contract before assuming the capability is missing or renaming code. Peer codes are authored assessments; unassessed means no comparison is established, not absence. Qualification, deployment identity, runtime observations and acceptance must carry their own evidence. Adoption records the catalog's observed path through source, build, promotion, registration and invocation; libraries use importer evidence and gates use declared execution surfaces. A full catalog path does not establish quality, freshness or a successful user outcome. Partial and unknown states retain their stated next action. Census stamps: importers asof 1790637268, gate census asof 1790104131 (unix seconds; -1 = census absent).
Capability matrix — measured against source
◉ authored stronger claim; source present● present◐ partial○ absent? unassessed; excluded from relative comparison · click any capability for its evidence
Peer cell coverage: authored assessed 114, unassessed 0. Authored assessments are not verified outcomes.
No capabilities match this filter or search.
| Capability | Nishi | InstagramTeen | Discord | Roblox | Snapchat | Yubo | MessengerKids |
|---|---|---|---|---|---|---|---|
Legal lines per country as data, strictest line when undeclaredMeasured:jur_rules_for exists in runtime/_hdl_build/nx_connect_juris.nx, verified at emit. WATCH, rung YS1: every age threshold, consent age and contact rule is a row per country sourced from the law read this month, and an undeclared or unsourced country gets the strictest line; the EU line sets minors' accounts private by default under the DSA guidelines of 14 July 2025 [eu-art28]; the US line requires verifiable parental consent before collecting personal information from children under 13 [ftc-coppa]; Instagram applies one Teen Account default in every country [instagram-teen] and Discord one teen-by-default setting globally [discord-teen] (both Part: a global floor, not a per-country table); no other page read documents a per-country rule table, uncertainty stated Adoption: LIB-WIRED importers=5 nonval=3 — fully adopted (top of its ladder).Pros Implementing source symbol found; runtime acceptance separate; ahead of InstagramTeen, Discord, Roblox, Snapchat, Yubo, MessengerKids; fully adopted on the estate ladderCons none on the measured axes (rival marks are documented presence, not depth) | ● | ◐ | ◐ | ○ | ○ | ○ | ○ |
No private adult-to-minor channel (the two-deep wall)Source present; authored stronger claim:yw_may_channel in runtime/_hdl_build/nx_connect_youth_lib.nx, verified at emit. EXCEED: peer to peer allowed, guardian to own youth allowed, any other adult reaches a minor only in a visible group with two or more adults, the published two-deep norm [church-gh20]; Instagram limits a teen's messages to people they follow or are connected to [instagram-teen], Discord sends messages from people a teen may not know to a separate inbox [discord-teen], Roblox limits minor and adult chat behind age checks [roblox-news], Messenger Kids puts the contact list in the parent's hands [messengerkids] -- each Part because an adult the teen follows or the parent approves can still hold a private channel; the Snapchat and Yubo pages read document no adult-minor rule Adoption: LIB-WIRED importers=9 nonval=8 — fully adopted (top of its ladder).Pros Source symbol found; stronger capability claim is authored; ahead of InstagramTeen, Discord, Roblox, Snapchat, Yubo, MessengerKids; fully adopted on the estate ladderCons none on the measured axes (rival marks are documented presence, not depth) | ◉ | ◐ | ◐ | ◐ | ○ | ○ | ◐ |
Rooms holding a minor need two or more visible adults, on join and on leaveSource present; authored stronger claim:room_admit in runtime/_hdl_build/nx_connect_lds_room_lib.nx, verified at emit. EXCEED: a room holding a minor refuses the join that would leave one adult alone with youth and refuses the leave that would drop it to one adult [church-gh20]; no rival page read documents a two-adult rule anywhere Adoption: LIB-WIRED importers=4 nonval=4 — fully adopted (top of its ladder).Pros Source symbol found; stronger capability claim is authored; ahead of InstagramTeen, Discord, Roblox, Snapchat, Yubo, MessengerKids; fully adopted on the estate ladderCons none on the measured axes (rival marks are documented presence, not depth) | ◉ | ○ | ○ | ○ | ○ | ○ | ○ |
Minor-to-minor contact only by mutual acceptance in adjacent age bandsMeasured:ysf_peer_may_connect exists in runtime/_hdl_build/nx_connect_youthsafe.nx, verified at emit. WATCH, rung YS2: two minors connect only when both accept and their age bands are adjacent (the bands are conf rows, never code), so an older-band minor cannot open a channel to a much younger one; Instagram private by default [instagram-teen], Discord friend-request alerts for unknown users [discord-teen], Roblox age-checked chat [roblox-news] and Messenger Kids parent-approved contacts [messengerkids] are all Part; no page read documents an adjacent-band rule Adoption: LIB-WIRED importers=4 nonval=3 — fully adopted (top of its ladder).Pros Implementing source symbol found; runtime acceptance separate; ahead of InstagramTeen, Discord, Roblox, Snapchat, Yubo, MessengerKids; fully adopted on the estate ladderCons none on the measured axes (rival marks are documented presence, not depth) | ● | ◐ | ◐ | ◐ | ○ | ○ | ◐ |
Discovery only inside shared circles, a block hides existence (anti-stalking)Measured:ast_may_discover exists in runtime/_hdl_build/nx_connect_antistalk.nx, verified at emit. WATCH, rung YS3: a member is discoverable only to people who share a circle, a block makes the blocker non-existent to the blocked account, requests are throttled by a conf rate, and re-contact through a new account is stopped by the personhood claim rather than by tracking; Instagram hides a private teen's content from non-followers [instagram-teen] and Snapchat shares location only with existing friends [snap-parents] (both Part); blocking is universal on the bar, but a block that hides existence is documented on no page read Adoption: LIB-WIRED importers=5 nonval=4 — fully adopted (top of its ladder).Pros Implementing source symbol found; runtime acceptance separate; ahead of InstagramTeen, Discord, Roblox, Snapchat, Yubo, MessengerKids; fully adopted on the estate ladderCons none on the measured axes (rival marks are documented presence, not depth) | ● | ◐ | ○ | ○ | ◐ | ○ | ○ |
No location, no precise presence, no public friend list for minorsMeasured:ty_active exists in runtime/_hdl_build/nx_connect_presence.nx, verified at emit. Present: presence is a coarse last-seen only and no location is ever collected; Snapchat's Snap Map location-sharing is off by default and friends-only, with no option to share with a non-friend [snap-parents] (Part: a minor may still share live location with friends); no other page read documents a location rule, uncertainty stated Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it.Pros Implementing source symbol found; runtime acceptance separate; ahead of InstagramTeen, Discord, Roblox, Snapchat, Yubo, MessengerKidsCons not adopted yet: source exists, never compiled: /api/build it | ● | ○ | ○ | ○ | ◐ | ○ | ○ |
Guardian consent and visibility without reading a messageMeasured:fam_guardian_consent exists in runtime/_hdl_build/nx_connect_family.nx, verified at emit. WATCH, rung YS4: below the country's consent age the guardian consents to the account and its lanes and sees who the minor is connected with, never message content; Instagram shows parents who their teen messaged in the past seven days while parents cannot read the messages, and teens under 16 need a parent's permission to loosen any protection (Best on the pages read) [instagram-teen]; Discord Family Center shows recently added friends, servers and who the teen messaged, never content [discord-family]; Snapchat ships Family Center [snap-parents]; Messenger Kids gives parents a dashboard over contacts but also lets them download all the child's messages, images and videos [messengerkids] (Part: content readable by the parent, the babysitter design this board refuses); Roblox and Yubo parental tools were not read today Adoption: LIB-WIRED importers=4 nonval=3 — fully adopted (top of its ladder).Pros Implementing source symbol found; runtime acceptance separate; ahead of Roblox, Yubo, MessengerKids; fully adopted on the estate ladderCons behind InstagramTeen (leads) | ● | ◉ | ● | ○ | ● | ○ | ◐ |
Personhood and age band proven, nothing identifying storedMeasured:cvh_person_attest exists in runtime/_hdl_build/nx_connect_personhood.nx, verified at emit. Present in source (rides connect CN18): a signed claim of personhood and age band and nothing else; Yubo verifies the age of every user with a face verification feature (Best on coverage) [yubo], Roblox requires age checks to chat and keeps them current with its age assurance system [roblox-news], Instagram places suspected teens into Teen Account settings regardless of the listed birthday [instagram-teen] and Discord admits only age-assured adults to age-gated spaces [discord-teen] (both Part); every rival that verifies keeps evidence or infers age from behaviour, the gap this row closes; September 2026 research reframes age assurance as a sociotechnical problem of evidence, claims and decisions [arxiv-age] Adoption: LIB-WIRED importers=2 nonval=1 — fully adopted (top of its ladder).Pros Implementing source symbol found; runtime acceptance separate; ahead of InstagramTeen, Discord, Snapchat, MessengerKids; fully adopted on the estate ladderCons behind Yubo (leads) | ● | ◐ | ◐ | ● | ○ | ◉ | ○ |
Age band attested by an issuer, unlinkable across servicesMeasured:hmix exists in runtime/_hdl_build/nx_connect_idage.nx, verified at emit. Present: an issuer attests an age BAND under unlinkable pseudonyms and no document is stored [arxiv-age]; no rival page read documents an unlinkable band Adoption: RUN-BY:roster — fully adopted (top of its ladder).Pros Implementing source symbol found; runtime acceptance separate; ahead of InstagramTeen, Discord, Roblox, Snapchat, Yubo, MessengerKids; fully adopted on the estate ladderCons none on the measured axes (rival marks are documented presence, not depth) | ● | ○ | ○ | ○ | ○ | ○ | ○ |
Private sign-up storing no identity document, every consent off by defaultMeasured:csu_signup_admit exists in runtime/_hdl_build/nx_connect_signup.nx, verified at emit. Present (rides connect CN13): a handle and a passphrase through OPAQUE, a minimal record, every consent off until the member turns it on, and a minor account opens only peer and guardian lanes; Messenger Kids collects the child's name, shared content, contacts and activity [messengerkids]; no rival page read documents a sign-up that keeps no identity Adoption: LIB-WIRED importers=8 nonval=2 — fully adopted (top of its ladder).Pros Implementing source symbol found; runtime acceptance separate; ahead of InstagramTeen, Discord, Roblox, Snapchat, Yubo, MessengerKids; fully adopted on the estate ladderCons none on the measured axes (rival marks are documented presence, not depth) | ● | ○ | ○ | ○ | ○ | ○ | ○ |
No dating or sexual-contact lane can ever admit a minorMeasured:ln_min exists in runtime/_hdl_build/nx_connect_lanes_lib.nx, verified at emit. Present: escalation is the MIN of both opt-ins and a date lane never admits a minor; Discord lets only age-assured adults reach age-gated spaces or unblur sensitive content [discord-teen], Instagram puts teens in the strictest settings [instagram-teen] and Roblox gates chat on age checks [roblox-news] (Part); Messenger Kids is a children's messenger with no such lane (Yes by construction) [messengerkids]; the Snapchat and Yubo pages read document no lane rule Adoption: LIB-WIRED importers=6 nonval=6 — fully adopted (top of its ladder).Pros Implementing source symbol found; runtime acceptance separate; ahead of InstagramTeen, Discord, Roblox, Snapchat, Yubo; fully adopted on the estate ladderCons none on the measured axes (rival marks are documented presence, not depth) | ● | ◐ | ◐ | ◐ | ○ | ○ | ● |
Circles of trust: family, mission, ward, stake, worldwideMeasured:ccl_circle_reach exists in runtime/_hdl_build/nx_connect_circles.nx, verified at emit. Present (rides connect CN14): circles join by consent and vouching, reach widens one circle at a time, and two youth peers befriend each other by mutual acceptance with their guardians able to see the friendship; Discord servers with Family Center [discord-family] and Messenger Kids parent-approved family contacts [messengerkids] are the nearest shapes (Part) Adoption: LIB-WIRED importers=12 nonval=10 — fully adopted (top of its ladder).Pros Implementing source symbol found; runtime acceptance separate; ahead of InstagramTeen, Discord, Roblox, Snapchat, Yubo, MessengerKids; fully adopted on the estate ladderCons none on the measured axes (rival marks are documented presence, not depth) | ● | ○ | ◐ | ○ | ○ | ○ | ◐ |
Bullying persistence broken: leave, remove, blockMeasured:grp_can_post exists in runtime/_hdl_build/nx_connect_group_lib.nx, verified at emit. Present in part: group roles let owners and admins remove a member and every member may leave; the block that hides existence rides rung YS3; blocking and reporting are universal on the bar (Yes, not re-read today, UNVERIFIED); Messenger Kids puts removal in the parent's hands [messengerkids] (Part) Adoption: LIB-WIRED importers=5 nonval=5 — fully adopted (top of its ladder).Pros Implementing source symbol found; runtime acceptance separate; ahead of MessengerKids; fully adopted on the estate ladderCons none on the measured axes (rival marks are documented presence, not depth) | ● | ● | ● | ● | ● | ● | ◐ |
Content-blind abuse signals (metadata only, never message content)Measured:abuse_score exists in runtime/_hdl_build/nx_connect_blind_abuse_lib.nx, verified at emit. Present: behavioural metadata of the account's own actions only, never message content and never a cross-service profile; the content-reading research line on grooming detection has no arXiv entry newer than March 2025 [arxiv-grooming]; Roblox brought open-source safety models to the ROOST model community in August 2026 [roblox-news] (read as a title only); no rival page read documents content-blind detection Adoption: LIB-WIRED importers=2 nonval=2 — fully adopted (top of its ladder).Pros Implementing source symbol found; runtime acceptance separate; ahead of InstagramTeen, Discord, Roblox, Snapchat, Yubo, MessengerKids; fully adopted on the estate ladderCons none on the measured axes (rival marks are documented presence, not depth) | ● | ○ | ○ | ○ | ○ | ○ | ○ |
Abuse reports verifiable inside end-to-end encryption (message franking)Measured:mfr_report_verify exists in runtime/_hdl_build/nx_connect_franking.nx, verified at emit. WATCH, rung YS5: a recipient proves that a reported sealed message was really sent by the reported account while the server never reads an unreported message; the research bar is transcript franking for encrypted messaging (July 2025) and the SoK on content moderation in end-to-end encrypted systems [arxiv-franking]; no rival page read documents franked reports Adoption: LIB-WIRED importers=3 nonval=2 — fully adopted (top of its ladder).Pros Implementing source symbol found; runtime acceptance separate; ahead of InstagramTeen, Discord, Roblox, Snapchat, Yubo, MessengerKids; fully adopted on the estate ladderCons none on the measured axes (rival marks are documented presence, not depth) | ● | ○ | ○ | ○ | ○ | ○ | ○ |
Fail-closed mandatory CSAE reportingMeasured:sink_fails exists in runtime/_hdl_build/nx_connect_csae_report_lib.nx, verified at emit. Present: a report whose sink fails refuses to proceed, proven in a gate; mandatory reporting is a legal duty every rival carries (Yes, not re-read today, UNVERIFIED) rival marks uncited — the Yes, Best or Part codes on this row are an observation read with no reference mark behind them Adoption: LIB-WIRED importers=2 nonval=2 — fully adopted (top of its ladder).Pros Implementing source symbol found; runtime acceptance separate; fully adopted on the estate ladderCons none on the measured axes (rival marks are documented presence, not depth) | ● | ● | ● | ● | ● | ● | ● |
Sealed messages, end-to-end from the sender's deviceMeasured:ce_emit_html exists in runtime/nx_connect_e2e_client.nx, verified at emit. Present, live at /connect/secure: sealed in the sender's browser, only ciphertext posted; no rival page read documents end-to-end encrypted youth chat, uncertainty stated Adoption: BUILT-UNPROMOTED — PARTIAL: compiled, never promoted to the serving root: /api/promote it.Pros Implementing source symbol found; runtime acceptance separate; ahead of InstagramTeen, Discord, Roblox, Snapchat, Yubo, MessengerKidsCons not adopted yet: compiled, never promoted to the serving root: /api/promote it | ● | ○ | ○ | ○ | ○ | ○ | ○ |
Sensitive-image protection for minors on the deviceOpen — watchingruntime/_hdl_build/nx_connect_mediaflag.nx : cmf_device_blur_flag, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. RIVALS LEAD, rung YS7: Discord blurs sensitive content for teens and only age-assured adults can unblur it [discord-teen]; ours will only flag an attachment for the device to blur and never scan on the server; Instagram's direct-message nudity protection is not on the page read today (UNVERIFIED)Pros none measured yetCons behind Discord; open contract; expected source declaration not established | ○ | ○ | ● | ○ | ○ | ○ | ○ |
| No tracking | |||||||
no IP geolocation, no behavioural profile, no device fingerprintOpen — watchingruntime/_hdl_build/nx_connect_notrack.nx : cnt_tracking_census, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. WATCH, rung YS6: a census over the connect serving path refuses any geolocation lookup, fingerprint or cross-session profile store, bite-proven with a planted lookup; Instagram infers suspected teens regardless of the listed birthday [instagram-teen] and Messenger Kids collects the child's activity [messengerkids], the tracking this board refusesPros none measured yetCons open contract; expected source declaration not established | ○ | ○ | ○ | ○ | ○ | ○ | ○ |
Rival-claim provenance. Every Yes, Best or Part mark in a rival column is a claim about someone else's product. A cited row carries a reference mark that resolves to a pinned mirror (the refs gate measures that); an uncited row is an observation read and is badged in its evidence until a reference lands. The badge is the receipt, never the proof: a mark proves a mirror exists, not that the mirror supports the code. The rows are counted below.
| Class | Count | Note |
|---|---|---|
| rows with rival marks | 12 | rows carrying a Yes, Best or Part in a rival column |
| cited | 11 | a reference mark resolves to a pinned mirror |
| uncited | 1 | an observation read, badged until a reference lands |
| rows, summed | 12 | RECONCILED: the parts sum to the total 12 |
Delivery and evidence
Inspect risks, technical debt, rendered observations, experiments and references. Read scope and limitations alongside every result.
Risk register
| Risk | Likelihood x impact | Mitigation |
|---|---|---|
| A structural rule that a minor or an adult can route around through a group | possible x high | room_admit holds the two-adult rule on join AND leave and yw_may_channel refuses any private adult-minor channel outside a visible group; YS2's gate carries a group-bypass neg-control |
| A safety feature that quietly becomes surveillance | likely x high | YS6's census refuses geolocation, fingerprints and profiles in the serving path; YS4 shows connections, never content; the matrix rows where rivals read content stay marked as the design refused |
| A country's law read wrong or out of date | possible x high | YS1 refuses a row without a source and applies the strictest line where a country is undeclared; every legal row carries its read date so a stale line is visible |
Release history and work log
The worked plan, on the board. Every leg appends what it measured, landed, retracted, learned and left queued, per rung, so a crash leaves the next seat a ledger here rather than a transcript to mine. Kinds: measure, land, retract, lesson, queue. Newest last.
| When | Rung | Kind | Entry |
|---|---|---|---|
| 2026-09-25 | BOARD | land | youthsafety admitted as DATA 2026-09-25 by the YS-BOARD seat: youthsafety.refs 9075 B (13 refs: 9 mirrors fetched and pinned today by nx_research_fetch plus 4 reused from faithsocial), youthsafety.matrix (19 rows, cols InstagramTeen Discord Roblox Snapchat Yubo MessengerKids), youthsafety.plan (5 sotabar, 5 barscan, 3 sotatarget, 7 rungs YS1-YS7 each with its contract symbol, 7 rungrole, ms M1-M2, ver 0.1 1.0); www.yubo.live/safety answered 404 (home page cited) and the eSafety Commissioner page failed TLS four times (not cited) |
| 2026-09-25 | YS2 | queue | INTAKE 1790358601 routed by nx_intake_route (operator-seat, epoch 1790360391) from ys-pm-seat: Y1 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): youth connect around the world and have fun, one to one a -- sponsor intake-1790358601 plus2 |
| 2026-09-25 | YS2 | queue | INTAKE 1790358602 routed by nx_intake_route (operator-seat, epoch 1790360406) from ys-pm-seat: Y2 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): no private channel between an adult and a minor -- the tw -- sponsor intake-1790358602 plus2 |
| 2026-09-25 | YS2 | queue | INTAKE 1790358603 routed by nx_intake_route (operator-seat, epoch 1790360420) from ys-pm-seat: Y3 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): minors never harm minors -- no bullying and no inappropri -- sponsor intake-1790358603 plus2 |
| 2026-09-25 | YS7 | queue | INTAKE 1790358604 routed by nx_intake_route (operator-seat, epoch 1790360433) from ys-pm-seat: Y4 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): no sexual or dating lane for minors, and media limits. A -- sponsor intake-1790358604 plus2 |
| 2026-09-25 | YS6 | queue | INTAKE 1790358605 routed by nx_intake_route (operator-seat, epoch 1790360448) from ys-pm-seat: Y5 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): safety without tracking. The server stays content-blind ( -- sponsor intake-1790358605 plus2 |
| 2026-09-25 | YS3 | queue | INTAKE 1790358605 routed by nx_intake_route (operator-seat, epoch 1790360448) from ys-pm-seat: Y5 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): safety without tracking. The server stays content-blind ( -- sponsor intake-1790358605 plus2 |
| 2026-09-25 | YS4 | queue | INTAKE 1790358606 routed by nx_intake_route (operator-seat, epoch 1790360466) from ys-pm-seat: Y6 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): the platform is not a babysitter -- no monitoring. No hum -- sponsor intake-1790358606 plus2 |
| 2026-09-25 | YS1 | queue | INTAKE 1790358607 routed by nx_intake_route (operator-seat, epoch 1790360481) from ys-pm-seat: Y7 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): clear legal lines that work for every country. The age of -- sponsor intake-1790358607 plus2 |
| 2026-09-25 | YS4 | queue | INTAKE 1790358608 routed by nx_intake_route (operator-seat, epoch 1790360495) from ys-pm-seat: Y8 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): responsibility sits with the person and their parents or -- sponsor intake-1790358608 plus2 |
| 2026-09-25 | YS3 | queue | INTAKE 1790358609 routed by nx_intake_route (operator-seat, epoch 1790360509) from ys-pm-seat: Y9 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): prevent stalking without tracking. Discovery happens only -- sponsor intake-1790358609 plus2 |
| 2026-09-25 | YS5 | queue | INTAKE 1790358610 routed by nx_intake_route (operator-seat, epoch 1790360523) from ys-pm-seat: Y10 of parent REQ 1790358600 (operator youth-safety directive 2026-09-25 12:50 CDT, filed under leg REQ 1790355000; derived by the YS-PM seat): report abuse without surveillance. A recipient can repor -- sponsor intake-1790358610 plus1 |
| 2026-09-25 | YS4 | land | nx_connect_family.nx (fam_guardian_consent) in buildroot/runtime/_hdl_build, 28805 B sha256 04cc22fb, composes nx_connect_circles for band, guardian link, reach, relationships and the channel (narrows, never widens) + nx_connect_family_gate GREEN 82/82 via nx_sov_build_run --qualify; planted defect (fam_front answers FAM_OK where consent is missing) RED 78/82 naming exactly the four lane teeth, restored to the same sha GREEN 82/82; table knowledge/connect_family.conf 2530 B (statement v1, 6 plain-language say lines, 3 settings each defaulting to its strictest value, 4 who kinds, 2 method rows UNSOURCED so production refuses FAM_NO_SOURCED_METHOD by name and a minor opens nothing beyond the guardian today); jur_rules_for ABSENT-PROVEN over buildroot/runtime (26602 files corpus_complete=1) so the lib publishes the FAM_JR_ slot interface and falls to the strictest line |
| 2026-09-25 | YS3 | land | nx_connect_antistalk.nx (ast_may_discover) in buildroot/runtime/_hdl_build, 26546 B sha256 b6b61d33: ONE predicate answers all 9 read paths (search, circle list, group roster, event roster, profile, message, invite, reconnect, contact request); a block hides the pair both ways and is keyed on the account AND on the blocked member's CN18 claim id, so a new account presenting that claim is hidden too and an account with no claim cannot reach a member holding a person-level block; every hidden reason maps to one public answer (no retaliation signal); a non-guardian adult never singles a minor out and sees one only in a vouched roster; a minor's presence, last-seen, location and friend list are omitted; throttles per sender and per recipient are conf rows and a sender asks a recipient once. nx_connect_antistalk_gate GREEN 94/94 via nx_sov_build_run --qualify (job 1790360523); planted defect (claim match disabled in ast_block_why) RED 84/94 naming exactly the 10 new-account teeth (job 1790360574), restored to the same sha. Table knowledge/connect_antistalk.conf 824 B, all 3 rows UNSOURCED, so production holds the strictest line (one pending request at a time, adult location none). The personhood lib is read not imported (wave 2 in flight): the caller passes the claim id bytes it verified with cvh_live_row |
| 2026-09-25 | YS2 | queue | YS-PM routed the operator youth-safety directive (REQ 1790358600, under leg REQ 1790355000) as 10 child requests, each FILED by nx_intake_route with a sponsor row intake-ID. Map (router top1 score, gap permil): Y1 1790358601 youth connect worldwide -> connect CN14, faithsocial FS11, YS2 plus2 (FS11 83361, 12); Y2 1790358602 two-deep wall -> connect CN14, YS2 plus2 (YS2 77789, 1); Y3 1790358603 minors never harm minors -> YS2, FS11 plus2 (FS11 76880, 30); Y4 1790358604 no sexual or dating lane, device blur -> YS7 plus2 (YS7 84519, 392); Y5 1790358605 no tracking -> YS6, YS3 plus2 (FS11 60771, 181; PM override: YS6 ranked 13th at 27964 because whole-word matching does not join fingerprints to fingerprint or geolocates to geolocation); Y6 1790358606 not a babysitter -> FS11, YS4 plus2 (FS11 60016, 356); Y7 1790358607 legal lines per country -> YS1 plus2 (YS1 119703, 339); Y8 1790358608 person and family responsibility -> YS4, connect CN14 plus2 (YS4 88434, 116); Y9 1790358609 stalking -> YS3, connect CN18 plus2 (YS3 139624, 532); Y10 1790358610 report without surveillance -> YS5, FS11, connect CN7 plus1 derived (YS5 131416, 107). OPEN for the board: no YS rung owns the two-deep wall on every lane (voice, video, media, invitations) or the refusal of a dating lane to a minor -- both held only by incumbents (yw_may_channel, room_admit, ln_min); Y6 has no mechanical witness yet (a content-read clause on the YS6 census would be one). OPEN for owners: connect CN4 and faithsocial FS9 train on behavioural signals, which Y5 and Y6 constrain at least for minors (operator decision); legal and legalpractice do not fit the country table (citation verification; Utah estate documents). |
| 2026-09-25 | YS1 | land | nx_connect_juris.nx (buildroot/runtime/_hdl_build, sha256 97090d6733d92b4d, 20978 B) jur_rules_for + jur_account_decision over knowledge/connect_jurisdictions.conf (sha256 3a1e7a8d9603d8d5, 4644 B; every row names its law, status, effective date, platform scope, ref, mirror, pin and read date) + nx_connect_juris_gate GREEN 92/92 (qualify job 1790360635); planted defect (the pin check disabled in jur_row_class) went RED 87/90 on exactly the three pinless neg-controls (job 1790360442), restored plus the read-date field and its neg-control, GREEN; production table 10 rows = 1 admitted (US COPPA 16 CFR 312.2 consent below 13 by verifiable parental consent, eCFR point in time 2026-09-01 mirror knowledge/fetched/rf_0fae5d94.raw pinned) + 9 UNSOURCED + 0 refused; the strictest line computed from the table is consent below 13 by verifiable parental consent with no account minimum and no barred band, because only one law is sourced; a Utah, French or undeclared declarant gets that strictest line |
| 2026-09-25 | YS3 | land | SHIPPED nx_connect_antistalk_gate through nx_organ_ship (job 1790360643): build sha b0027b0a, PROVE GREEN 94/94 on the restored source (lib sha b6b61d33, re-hashed after the bite), first promote live_sha = staged_sha b0027b0a, _offc twin installed from the promoted root, registered callable; admitted to knowledge/gateroster.conf (hand-added, grammar of the franking row). The lib has no binary by design; its adoption is the INTEGRATOR composing ast_may_discover on every read route |
| 2026-09-25 | YS1 | land | SHIPPED nx_connect_juris_gate through nx_organ_ship (job 1790360683): built fa2d47ab95f7472f, prove GREEN 92/92 on the fresh build, first promote (live was absent, announced), offc twin installed, registered callable, admitted to knowledge/gateroster.conf with its bite receipt; the lib nx_connect_juris.nx is compiled into the gate and into any consumer that imports it (no binary of its own) |
| 2026-09-25 | YS2 | land | nx_connect_youthsafe.nx landed (ysf_peer_may_connect composed over yw_may_channel and ln_active_lane: two minors 1:1 only by mutual acceptance inside a shared circle or the opted-in worldwide youth ring and within the band span, a far pair shares only a visible group, a minor capped below the dating lane, an adult pair abstained YSF_ABSTAIN_ADULT_PAIR; media masks and a device blur flag; block mute restrict and owner removal as the member's own rows with a durable reload; contact-request throttle and new-account cooling naming their rows; youth-group two-deep join and a leave never refused) + knowledge/connect_youthsafe.conf (every row UNSOURCED this leg so production is the strictest line: same band only, text only, blur on, no contact request) + nx_connect_youthsafe_gate GREEN 86/86 by --qualify. Bite: the far-band check widened by YSF_DEC_MAX went RED 83/85 on the two far-band teeth, restored byte-identical (lib sha256 fab15676) GREEN 85/85, then the adult-pair abstention of the board done-rule added with its tooth GREEN 86/86 |
| 2026-09-25 | YS3 | queue | OPEN after the YS3 land: (1) all 3 rows of knowledge/connect_antistalk.conf are UNSOURCED (throttle counts and windows per sender and per recipient, the adult coarse location band) -- each needs a calibration or a primary source read this month, and until then production holds the strictest line (one pending request per sender and per recipient, adult location none); (2) best-in-class pages UNREAD this leg: Signal's block article answered 403 to nx_research_fetch (bot wall, nothing saved), Instagram's block-and-new-accounts help and Snapchat's teen location defaults were not fetched -- mirror, pin and read them before the board claims the exceed; (3) INTEGRATOR: compose ast_may_discover on every read route of nx_connect_serve, filling AST_RQ_* from ccl_circle_reach, ccl_band, ccl_ring_adm, ccl_group_ok, ccl_channel, ccl_guardian_pair and the viewer's CN18 claim id, ast_block and ast_unblock on the block routes, ast_request and ast_answer on the contact-request routes, ast_presence_out, ast_last_seen_out, ast_location_out and ast_friends_out on every member render, and a durable row per block and per request (the lib state is in memory) -- the gate drives the lib on synthetic values, so the wiring against a live circles state is UNVERIFIED; (4) the cross-account guarantee holds for any account presenting the SAME claim id, but CN18 cvh_issue mints a fresh random claim id per claim, so a blocked person who earns a SECOND claim under a new account (two new in-person vouches) is not linked -- CN18 needs a stable per-person handle, or the vouch path must refuse a person their circle already holds a claim for, before one person, one claim is true across accounts |
| 2026-09-25 | YS7 | retract | The first rank named YS7 DARK-CONTRACT: its watch pointed at nx_connect_youthsafe.nx, which a builder landed during admission without that symbol, so the cell would have read as a lost build; the rung and its matrix row were repointed to the unbuilt organ runtime/_hdl_build/nx_connect_mediaflag.nx symbol cmf_device_blur_flag, and the next rank reads it OPEN with no DARK flag |
| 2026-09-25 | BOARD | measure | nx_ladder youthsafety LADDERED (3 targets dated, 7 of 7 rungs placed); nx_barfresh FRESH (5 bars: 2 fresh 2026-09, 3 attested older months, 5 scans this month); nx_compare_rank done 5 of 7 because the wave-3 builders declared jur_rules_for, ysf_peer_may_connect, ast_may_discover, fam_guardian_consent and mfr_report_verify in source during admission (each still LIB-UNCENSUSED), critical path YS7 then YS6, both sponsored plus2 by intakes 1790358604 and 1790358605; nx_page_verify https://nishifamily.com/compare/youthsafety GREEN (status 200, a11y-issues 0); source presence only, no gate of a builder was run by this seat |
| 2026-09-25 | BOARD | lesson | nx_compare_refs_gate named youthsafety roblox-news MOVED: the corp.roblox.com fetch took one redirect hop and the open-redirect ratchet rose on this board's row; re-fetched at the canonical https://about.roblox.com/newsroom with zero hops (byte-identical, sha256 7edd966a), repointed the ref, and the next gate run names youthsafety zero times; the fleet verdict stays RED 38/44 on other domains' rows (missing mirror, pin mismatches, uncited keys, open-redirect and moved ratchets) |
| 2026-09-25 | BOARD | land | knowledge/compare/youthsafety.gates written (the bare DA_GATESDIR tree): 5 promoted gates cited -- nx_connect_signup_gate, nx_connect_circles_gate, nx_connect_antistalk_gate, nx_connect_family_gate, nx_connect_franking_gate; the juris and youthsafe gate sources exist but had no promoted binary at 1790360700 and are not cited |
| 2026-09-25 | BOARD | queue | OPEN at hand-off: YS6 no-tracking census (cnt_tracking_census) and YS7 device-side sensitive-image flag (cmf_device_blur_flag) have no builder yet; cite the juris and youthsafe gates in youthsafety.gates once promoted and GREEN; the five builder libs read LIB-UNCENSUSED until nx_eco_graph_build then nx_importcensus re-run; the served connect app wires none of these libs until the INTEGRATOR seat lands them; rival cells coded UNVERIFIED (bullying controls, CSAE duty, Instagram direct-message nudity protection) and Roblox and Yubo parental tools owe a pinned read; the legal-lines row cites only the EU and US lines -- the Australian eSafety page failed TLS four times and the UK Ofcom children's codes are not yet mirrored; the incumbent index is STALE for the ranker (nx_incumbents index) |
| 2026-09-25 | YS5 | measure | VERIFIER PARTIAL 40/40 -- live /api/gate_run job 1790360765 exit 0 GREEN 40/40 on promoted gate; lib sha e16a94cc 10925 B and gate sha a38b34fb 14048 B match the claim; mfr_report_verify declared at off 9675; sizes recomputed by hand (env 296 = 32+216+16+32, record 360, report 344) agree; lib reads no content beyond the TF tail and takes no IP, device id, location or profile; no age, rate or period literal; statutes honestly UNSOURCED. DEFECT: 7 sys_mmap and 0 sys_munmap in the lib (sys_munmap exists in nx_syscalls) -- mfr_relay leaks 2 mappings per relayed message and mfr_report_verify 3 per report, unbounded in a serving daemon; must be fixed before the integrator wires it. HAZARD UNVERIFIED: cseal_nonce is [0000][seq] with no direction bits, so the sender's frank seq must equal the store seq on receive and two senders under one conversation key at one seq would reuse a nonce. Bite receipts (RED 37/40 job 1790360337) not re-run by this verifier. A stray byte A precedes receive-opens-message-1 in the gate output. |
| 2026-09-25 | YS4 | land | SHIPPED nx_connect_family_gate: /api/build (src_path names the target) sha256 089602ba 133608 B, /api/promote with expect_sha256 PROMOTED, /api/tools/register REGISTERED callable, nx_offc_install promoted installed=1, admitted to knowledge/gateroster.conf (comment row plus name); /api/gate_run on the served binary GREEN 82/82 exit 0; knowledge/connect_family.conf now 2953 B with method rank 2 citing 16 CFR 312.5(b)(2)(i)-(v), read today from knowledge/fetched/cmp_youthsafety_coppa_312_5.xml 9165 B sha256 d91d6106 (eCFR versioner text as of 2026-09-01), so production under the strictest line demands rank 2 and a consent by it answers FAM_OK, after which the youth peer 1:1 reads FAM_SETTING_OFF until the family turns it on |
| 2026-09-25 | YS4 | queue | OPEN: (1) YS1 jur_rules_for is absent, so no country row reaches fam_guardian_consent yet and the integrator passes 0 as *i64 (the strictest line) until YS1 fills FAM_JR_SOURCED, FAM_JR_CONSENT_AGE and FAM_JR_METHOD; (2) the YS-BOARD seat owes a refs pin for cmp_youthsafety_coppa_312_5.xml (sha256 d91d61066659f060cd7de0f0612c0f95c534e57b69ea3c5682c38b97e48ebbcb) and a watch row for fam_guardian_consent; (3) rank 1 email_plus stays UNSOURCED, its paragraph unread; (4) the media tier is recorded and shown to the youth but enforced nowhere yet, the media send path must read fam_setting FAM_SET_MEDIA; (5) the family state is in memory, the consent and history rows need the integrator's append-only persistence; (6) the best-in-class vendor pages (Instagram Supervision, Apple Screen Time Communication Limits, Messenger Kids dashboard, Ask to Buy) were named from the brief, NOT mirrored, UNREAD; (7) groups in the guardian view come from the caller's roster (nx_connect_group_lib), not composed in the lib |
| 2026-09-25 | YS1 | measure | second source landed: UK GDPR Art 8 as served revised by legislation.gov.uk (eur/2016/679/article/8, mirror knowledge/fetched/rf_988c5ce8.raw, 48223 B, pin 37432e8eff5d5326 matched by nx_filehash) reads lawful where the child is at least 13 years old, below 13 only with consent given or authorised by the holder of parental responsibility, and Art 8(2A) lets regulations move the age between 13 and 16; row GB UKGDPR-Art8 SOURCED; the COPPA mirror pin 5a29d13e4512092a matched too; the PROMOTED gate re-run through /api/gate_run (job 1790360850) reads 92/92 GREEN over the new table: 10 rows = 2 admitted + 8 unsourced + 0 refused, strictest line folds 2 rows = consent below 13 by verifiable parental consent, no account minimum, no barred band (conf sha256 bda8aa8d8b85a944, 5200 B); a GB declarant still gets the strictest line because the Online Safety Act 2023 row is UNSOURCED |
| 2026-09-25 | YS1 | queue | OPEN on YS1 after this leg: (1) sources not landed, each an UNSOURCED row that forces the strictest line until read -- EU GDPR Art 8 (EUR-Lex answered a 202 bot challenge; each member state also needs its own row), EU DSA Art 28 and the minors guidelines, UK Online Safety Act 2023 children duties, Australia social media minimum age (legislation.gov.au text is a script shell; try the Act download form), Brazil Lei 15211 ECA Digital (planalto refuses the fetcher TLS 1.2 handshake; transport rung owed), India DPDP 2023 s9 and its Rules commencement, Utah 13-71 and the app store act (litigated; read what is in force today); (2) the strictest line is thin (2 sourced laws, no barred band) until those land, so an undeclared minor is not barred anywhere yet; (3) the gate measures against a constant day 20260925 and the integrator must derive yyyymmdd from its clock by composing the estate civil-date incumbent; (4) the lib checks the pin FORM and the gate checks the mirror PRESENT, the sha256 match is today a hand nx_filehash and belongs in the refs gate; (5) contact rules named in the YS1 done-rule are not a column (YS2 ysf_peer_may_connect owns contact); (6) the age floor of an attested band comes from nx_connect_idage, the signup record carries only MINOR or ADULT, so a MINOR with no finer band reads as the youngest age |
| 2026-09-25 | YS2 | land | nx_connect_youthsafe_gate SHIPPED: /api/build sha256 c6889cb3 (98040 B, src_path nx_connect_youthsafe_gate.nx, src_stable 1) then /api/promote expect_sha256 PROMOTED, /api/tools/register REGISTERED callable, /api/gate_run on the promoted binary exit 0 GREEN 86/86 (subject knowledge/connect_youthsafe.conf rung 1), nx_offc_install twin identical by nx_filehash cmp, admitted to knowledge/gateroster.conf as HAND-ADDED. Final sources: lib sha256 45e62b55 (26329 B), conf sha256 a83e02cf (2885 B) |
| 2026-09-25 | YS2 | queue | OPEN after YS2: (1) every row of knowledge/connect_youthsafe.conf is UNSOURCED so production runs the strictest line (same band only, text only, blur on, NO contact request at all) until a seat mirrors and pins this month's Roblox age-checked chat, Instagram Teen Accounts, Discord teen-by-default and Apple Communication Safety pages, lands .refs rows and flips each _src to 1; the band edges are a board decision (Roblox groups 13-15 and 16-17 would make 13 and 17 adjacent); (2) the throttle and cooling rows need a calibration (no incumbent rate row found, nx_connect_blind_abuse keeps its rate weights as code consts); (3) the guardian view of a youth friendship is the incumbent ccl_guardian_sees and is not re-proven in this gate, a circles-state tooth is owed; (4) YSF_RQ_REACH comes from ccl_circle_reach at the caller and the gate drives it synthetically; (5) the INTEGRATOR wires ysf_* into nx_connect_serve (calls returned to the leg) |
| 2026-09-25 | YS3 | measure | VERIFIER CONFIRMED-WITH-FINDING 94/94 -- my own /api/gate_run (job 1790360911) GREEN 94/94 on the promoted gate b0027b0a (root and _offc hash-identical), lib b6b61d33 26546 B, ast_may_discover declared, bite RED 84/94 read in job 1790360574, 3 claimed journal rows present, no content read, no network address or device input, no geolocation, adult-minor single-out refused; FINDING from the source (runtime UNMEASURED): ast_block leaves the blocked member's PENDING request standing and ast_over counts it, so under today's strictest line (UNSOURCED recipient row = one pending per recipient) a stalker's one unanswered request locks every other sender out of the victim, and once the victim blocks, that request is hidden from the victim by the same predicate, so it cannot be answered -- the block should retire the pending pair (owed to YS3); also the blocker still sees the blocked person's NEW account (the person-level check runs only when the target is the blocker), and the gate hand-copies SA_AGE_JTI_BYTES as 16 |
| 2026-09-25 | YS4 | measure | VERIFIER CONFIRMED-WITH-FINDINGS 82/82 served gate_run GREEN exit 0 (job 1790360967), lib 28805 B sha256 04cc22fb matches, entry point declared, 3 journal rows present, COPPA mirror pin d91d6106 matches and (b)(2)(i)-(v) read in it; lib reads no content, IP, device or location and types no age literal. Findings: fam_guardian_consent has no HOLD_SELF check, so a guardian can re-take control after age-up when the caller passes a lower age_lo or no jurisdiction row (PLAUSIBLE, not exercised); email_plus is 312.5(b)(2)(viii) inside the same mirror, so UNSOURCED is a choice not a gap; served-binary lib freshness not rebuilt by this verifier; bite not re-run; gate fixtures are in-memory, no /tmp dir |
| 2026-09-25 | YS2 | measure | VERIFIER PARTIAL 86/86 -- gate_run on promoted c6889cb3 GREEN 86/86 exit 0 (job 1790361024), lib 45e62b55 and conf a83e02cf match the claim, offc twin identical, entry point declared at off 15863, no content IP device-id or geolocation path found, adult-minor DM walled via yw_may_channel, minor capped below dating via ln_active_lane; REFUTES the far-band and mutual-acceptance guarantee in groups: GROUP ctx returns the group verdict before the band-span and lane checks and ysf_group_may_join has no minimum size, invite or acceptance, so two far-band minors (11 and 17) or two worldwide-ring strangers get a private two-member youth group, an effective 1:1 (gate tooth same-far-band-pair-shares-a-visible-youth-group reads 4); every conf row UNSOURCED and no baseline mirrored, so no legal or best-in-class claim is admitted; bite RED 83/85 taken from the builder's receipt, not re-run |
| 2026-09-25 | YS1 | measure | VERIFIER CONFIRMED 92/92 GREEN (promoted gate re-run job 1790361014, prod rows 10 = 2 admitted + 8 unsourced + 0 refused, strictest recomputed by hand from the conf = consent below 13 rank 2, no min, no barred; lib 97090d67 and conf bda8aa8d re-hashed equal to the claim; both mirrors re-hashed equal to their pins; COPPA 312.2 under the age of 13 and UK GDPR Art 8 at least 13 years old read in the mirrors; bite RED 87/90 read in job 1790360442). Lib takes only a self-declared place, reads no content, IP or device, every age is a conf row. Findings: the strictest line is the strictest of SOURCED rows only, so an unsourced place (GB OSA, US-UT, AU, BR, EU) gets consent below 13 and a 13-15 minor reads ALLOW there, looser than the unread law may be; the gate has no tooth for a ref of dash, a mirror outside knowledge/, a bad scope token, or a production GB declarant; jur_ymd accepts day 31 in every month; the done-rule contact-rules field is absent (YS2 owns contact) |
| 2026-09-25 | YS1 | land | R7 wave 6: EU GDPR-Art8 row SOURCED in knowledge/connect_jurisdictions.conf from Regulation 2016/679 Art 8 AS ADOPTED served by legislation.gov.uk eur/2016/679/article/8/adopted (knowledge/fetched/rf_2a31c378.raw sha256 c9abb72c 30426 B, read 2026-09-25): consent given or authorised by the holder of parental responsibility below 16, member states may lower it by law to not below 13, Art 8(2) reasonable efforts to verify; effective 2018-05-25 from Art 99(2) It shall apply from 25 May 2018 (rf_dbca1ad2.raw sha256 40336800); EUR-Lex ELI answered status 202 with the 2035 B bot challenge again (rf_d7db4d68.raw), so an amendment since adoption is UNVERIFIED; EU is not an ISO 3166-1 country, so member-state declarants still get the strictest line until their own ages are sourced |
| 2026-09-25 | YS1 | land | R7 wave 6: GB OSA2023-s12-children-safety-duties row SOURCED from legislation.gov.uk ukpga/2023/50/section/12 (rf_2c34aced.raw sha256 dcfe9d15 50574 B, read 2026-09-25): its Commencement Information reads S. 12 in force at 10.1.2024 by S.I. 2023/1420 reg. 2(d), the effective date; s12(6) highly effective age verification or estimation where s12(4) requires it; s12 draws no account-age, consent or barred line, so the row carries four dashes and a GB declarant now gets its DECLARED line (UK GDPR Art 8: consent below 13, parental_consent) instead of the strictest; s11, s35-37 and Part 5 were not read |
| 2026-09-25 | YS1 | land | R7 wave 6: BR Lei-15211-2025-ECA-Digital-Art24 row SOURCED from the Senado Federal publication text legis.senado.leg.br/norma/41465823/publicacao/41471709 (rf_8da92722.raw sha256 4159a3ac 111114 B, read 2026-09-25) because planalto still fails the fetcher TLS 1.2 handshake (server suite 49199 = 0xC02F, nx_https_get ERROR TLS handshake failed); Art 24 caput: users or accounts of children and adolescents de ate 16 anos must be linked to the account of a legal guardian, encoded as consent below 17 (inclusive reading, the strict one; lower to 16 if counsel reads it as under 16) with verifiable_parental_consent, the table having no guardian-linked-account class (owed); effective 2026-03-17 from Art 41-A added by Lei 15.352 de 25/02/2026 Art 19 (rf_d4fc447f.raw sha256 7d2143b3); the Senate alteration register (rf_92245690.raw sha256 5f2f1a68) lists no change to Art 24 |
| 2026-09-25 | YS1 | measure | R7 wave 6: /api/gate_run nx_connect_juris_gate job 1790372818 GREEN 92/92 exit 0 on SUBJECT bytes=9530; production rows 10 = admitted 5 + unsourced 5 + refused 0 (was 2 + 8 + 0); strictest line rows_used 5, consent below 17 (was 13; 17 from the BR inclusive reading, 16 from EU GDPR Art 8), method rank 2 verifiable_parental_consent (unchanged), min account age none, barred band none; the US, US-UT and FR production teeth still hold (Utah keeps both rows UNSOURCED) |
| 2026-09-25 | YS1 | queue | R7 wave 6 OPEN: AU OSA-Amendment-SMMA-2024 still UNSOURCED, so the strictest line still has NO barred band (FRL asmade/text is the same 77930 B script shell, esafety.gov.au fails the fetcher TLS path nishi-t12 t12-unknown, AustLII search 403) -- owed a text reader for the Register's PDF or Word download form, or the esafety TLS rung; IN DPDP s9 plus its Rules commencement, US-UT 13-71 plus its litigation status, US-UT App Store Accountability and EU DSA Art 28 were not attempted (this seat started after its clock deadline); member-state GDPR Art 8 ages are owed row by row, and an FR row first needs the gate's FR production tooth changed; refs rows for gdpr_art8_adopted, gdpr_art99_adopted, osa2023_s12, br_lei15211_art24 and br_lei15352_art19 are carried in the R7 result for the youthsafety refs owner |
| 2026-09-25 | YS2 | land | FIX-YOUTH wave 8 debt 1790361172 ACTUAL fixed in nx_connect_youthsafe: a group is judged against a ROSTER view (ysf_roster_new put size count, verified bands only, no ids, never stored) whose size and adults the lib COUNTS; ysf_peer_may_connect with no roster judges a group context as one-to-one; ysf_peer_may_connect_in judges a group below group_min_members as one-to-one (band span plus mutual acceptance) and refuses a roster that cannot hold the pair (YSF_REFUSED_ROSTER); group_min_members 3 is a DERIVED row appended to knowledge/connect_youthsafe.conf (two members are a pair; a floor at or below 2, absent or UNSOURCED reads as no floor and judges every group one-to-one); ysf_group_may_join takes the roster plus reach and world (a minor joins only with a shared circle or both in the worldwide youth ring, and that ring never carries an adult into a youth group); ysf_group_after_leave counts from the roster; YSF_RQ_ADULTS is no longer read. RED on the old lib (sha256 45e62b55) qualify 86 of 88 (no-roster group teeth actual 4 = group verdict against expected -307 FAR_BAND and -306 NO_ACCEPT); GREEN on the fix (lib 32416 B) qualify 105 of 105; nx_organ_ship SHIPPED nx_connect_youthsafe_gate b651aa85 prove GREEN (1 lost run = the superseded verdict note; behavior review knowledge/status/harness/review-youthsafe-gate-b651aa85.txt); prior gate banked nx_connect_youthsafe_gate.elf-c6889cb3-20260925. Still owed under 1790372683: grp_add composes ysf_group_may_join, room_admit and room_may_leave SUPERSEDED then ARCHIVED; ccl_channel delegation is 1790372882. NOT LIVE: imported only by its gate, api_lib youth_peer UNWIRED. |
| 2026-09-25 | YS3 | land | FIX-YOUTH wave 8 debt 1790372694 parts 2 and 3 fixed in nx_connect_antistalk (part 1, the one-pending lock, stays the declared strictest line of the UNSOURCED recipient row, NOT-AN-ISSUE per R3b): ast_block now answers the pending requests between the pair at once, both ways (ast_clear_pending, the rows stay as history), and ast_over skips on the recipient column any row whose sender the recipient blocked, so a blocked stalker neither waits in the victim's queue nor holds the victim's recipient throttle (strictest line and sourced window both); rq carries the TARGET's live claim (AST_RQ_TCLAIM and AST_RQ_TCLAIM_N, AST_RQ_SLOTS 10 to 12) and ast_block_why matches it against the viewer's own claim-bearing blocks (AST_WHY_BLOCKER_PERSON 12), so the blocker neither sees nor requests an account presenting the blocked claim. RED on the old lib qualify 102 of 107 (pending row still 1; the third sender -7 THROTTLED_RECIPIENT under the strictest line and in the sourced window; the new account VISIBLE to the blocker and requestable 0 OK); GREEN on the fix (lib 29119 B) qualify 111 of 111 with neg-controls (without a block the stalker still throttles; a full sourced window still refuses the next sender; the blocker still sees another person) and binding teeth tying the gate slots to AST_RQ_TCLAIM, AST_RQ_TCLAIM_N and AST_RQ_SLOTS; nx_organ_ship SHIPPED nx_connect_antistalk_gate d147fff8 prove GREEN content GREEN; prior gate banked nx_connect_antistalk_gate.elf-pre-fixyouth-20260925 (96264 B). Still owed (SPRAWL, 1790372875): YSF_SET_BLOCK, CCL_F_BLK and the serve CS_BLOCKED slot retire onto ast_block; the request rows carry no sender claim, so a blocked person's OTHER account's already-pending request is not cleared by an account-level block. NOT LIVE: imported only by its gate, api_lib antistalk_discover UNWIRED. |
| 2026-09-25 | YS1 | land | W8 SEAT FRONT-DOOR juris_rules WIRED on the CONNECT front door (MCP nx_connect, API /api/organ_run target=nx_connect, workflow plan-connect-frontdoor- row 4): jur_rules_for plus jur_account_decision over knowledge/connect_jurisdictions.conf through jur_conf_load, the place self-declared (ISO 3166 alpha-2 plus an optional subdivision, longer input refused), today yyyymmdd and the age floor supplied by the caller so the verb is a pure function of its arguments and the table; a table with no admitted row in force answers refused_no_table with ok 0 and decided 0 and names no account decision (planted empty-table neg-control T19 in nx_connect_api_gate, 23/23 GREEN on the NAS). Live: US age 12 = allow-with-parental-consent (consent below 13, method rank 2), table 10 rows = 5 admitted + 5 unsourced + 0 refused, partition_ok 1. Nothing stored, no IP, device or location signal read. Lib nx_connect_api_lib.nx sha256 973dc857, live nx_connect_api.elf sha256 b0552704 |
| 2026-09-25 | YS4 | land | FIX-YOUTH wave 8 debt 1790372710 fixed in nx_connect_family: fam_guardian_consent reads FAM_R_HOLDER after the member, minor, guardian and statement checks and returns the new named refusal FAM_SELF_HELD (0 - 118) when the youth holds their own settings, before any write, so a linked guardian can no longer retake control after fam_age_up (fam_age_up itself already refused re-entry with FAM_ALREADY). RED on the old lib qualify 81 of 84 with the referee's own fixture values (fam_age_up girl at FG_AGE, then fam_guardian_consent girl gdad jrs FG_AGE - 1 FG_M_WEAK: returned FAM_OK, holder became GUARDIAN actual 0 expected 1, and the knock-on guardian view reopened actual 3 expected -110); GREEN on the fix (lib 29209 B) qualify 85 of 85, the same call before the age-up still FAM_OK (the existing neg-control tooth), the refused retake names FAM_SELF_HELD and the holder stays SELF; nx_organ_ship SHIPPED nx_connect_family_gate e9079c1d prove GREEN content GREEN; prior gate banked nx_connect_family_gate.elf-pre-fixyouth-20260925 (133608 B). Still owed (R5c, debt 1790372889): the family strictest line versus jur_rules_for for ages 13 to 17. NOT LIVE: imported only by its gate, api_lib family_consent UNWIRED. |
| 2026-09-26 | YS3 | land | RESUME-YOUTH wave 10 closed the two legs wave-8 FIX-YOUTH left open (full rows on connect.plan CN15 and CN18 at 1790438160 and 1790438440): (4) nx_connect_faith cfa_discover now composes ast_may_discover on the search path for every candidate, the owner's first composer outside its gate -- faith gate SHIPPED 675a20f1 (qualify 67/67 GREEN, planted revert 65/67 RED, served gate_run GREEN), debt 1790372702 stays OPEN for csh_visible, csh_share_visible and ccl_ask; (5) nx_connect_personhood issues a youth band only with the guardian's own act (a live nx_connect_family consent by a circles-linked guardian holding a live adult claim), so two colluding verified adults can no longer mint a youth band from vouches alone -- personhood gate SHIPPED 0115f7c1 (65/65 GREEN, 60/65 RED on the lib without the check, served gate_run GREEN), debt 1790359971 EATEN (job 1790438444 DEBT-EATEN at_idx 4475); residual caller-asserted ccl_link_guardian stays under 1790372549. Neither lib is served yet (faith cfa_discover and personhood have no serving caller). |
| 2026-09-26 | YS5 | land | RESUME-CRYPTO-REALM wave-10 seat finished nx_connect_franking (debts 1790372740 leak and 1790372741 nonce, which superseded 1790361185; review R4b). The wave-8 seat had landed per-sender keys, unmapped the lib's own large buffers and rebuilt the gate, but never promoted or journaled it, and N relays were still NOT constant. MEASURED on that predecessor lib (5ed0f59c) with new absolute teeth: qualify job 1790437452 passed 60/63 verdict=RED, relay grew 3072 KB and receive 6400 KB over 128 rounds at 4096 B, and 7231 relays of a 1-byte message grew 183016 KB, because every HMAC ran through the allocating hmac_sha256 (two 512 B SHA contexts mapped and the pads bumped on every call, none freed, about 26 KiB of VmSize per call) and a buffer at or under NXA_SMALL_MAX (256 B) is an arena bump that sys_munmap never returns. FIX (buildroot/runtime/_hdl_build/nx_connect_franking.nx, 16439 B sha256 917b107f): every per-call buffer is one real mapping through mfr_map (at least NXA_SMALL_MAX + 1 bytes, the allocator's own bound) unmapped on every exit, and every HMAC runs through nx_hmac's caller-owned hmac_sha256_workspace inside such a mapping (mfr_hmac). The gate (24978 B sha256 f59cb042) adds an HMAC KAT against the incumbent hmac_sha256 with a neg-control, a fixture tooth that a 1-byte stamped record sits under the arena bound, and three ABSOLUTE server-path teeth. RED on the planted original lib (sealed and opened under the shared conversation key, rec and inner never unmapped; sha256 e4eb687b): job 1790437795 passed 53/63 (the two-senders-one-id neg-control shares a keystream, the shared key opens a record, a relabelled record opens, and all six leak teeth fail). GREEN: job 1790438062 63/63, relay 0 KB, 7231 small relays 0 KB, receive 256 KB, frank 1280 KB against its AEAD-only control of 1024 KB. SHIPPED by nx_organ_ship job 1790438861: gate sha 36894c76 promoted over c798dffe, _offc twin installed, registered; loss approved allow_loss_v1 90b48814 (the old conversation-key-opens tooth, superseded by the per-sender key teeth); behaviour reviewed in knowledge/status/harness/review-franking-gate-20260926.review (sha256 320d5ff1). NONCE: the cseal nonce bytes are unchanged; as the R4b referee ruled, the key schedule owns uniqueness, so each sender seals under HMAC(ck, label, sender) and two senders at one client msg id never share a (key, nonce) pair (neg-control GREEN, RED on the original). OPEN: the frank path still grows about 8 KiB per call inside cseal_seal and the ChaCha20-Poly1305 core, and cseal bumps 32 B of nonce and aad per call (new debt row for those owners); store dedup by (sender, client msg id) rides consolidation debt 1790372726; per-device keys and extracting the nx_mls_group key schedule into an importable lib stay owed. |
| 2026-09-26 | YS2 | land | W10 SEAT FRONT-DOOR-YOUTH youth_peer WIRED on the CONNECT front door (MCP nx_connect, API /api/organ_run target=nx_connect, workflow plan-connect-frontdoor- row 7): ysf_peer_may_connect with no roster, ysf_peer_may_connect_in over a caller-supplied roster of verified bands (one character per member of the room, echoed only as the counts the engine read), policy knowledge/connect_youthsafe.conf through ysf_policy_new. The FIX-YOUTH roster fix now answers through the door: a far-band pair in a room of three is a visible group, in a room of two it is judged one to one and refused far_band (nx_connect_api_gate T24 and neg-control T25, RED on the pre-change lib, 29/29 GREEN on the NAS). Live: two same-band minors in the worldwide youth ring = lane Friendship; a far-band pair one to one = -307 far_band on row peer_band_span; two adults = abstain_adult_pair, decided 0. Nothing stored, no member data read. Lib nx_connect_api_lib.nx sha256 26d83c5b, live nx_connect_api.elf sha256 2c2b2521. This supersedes the NOT LIVE note of the 1790374975 row for the MCP door; the alpha HTTP door waits on the ALPHA rebuild. |
| 2026-09-26 | YS3 | land | W10 SEAT FRONT-DOOR-YOUTH antistalk_discover WIRED on the CONNECT front door (workflow plan-connect-frontdoor- row 8): ast_may_discover over a synthetic viewer and target (and each person's other account) with the block rows the caller describes, one-byte claim ids built per call; the FIX-YOUTH claim-bearing block now answers through the door both ways (blocked_person, blocker_person, no_claim), and viewer_told carries the one public answer (ast_public_answer) so a block reads as a stranger (nx_connect_api_gate T26 and neg-control T27, RED on the pre-change lib, GREEN on the NAS). Live: two adults sharing the searched context = visible 1 shown; the target blocked the viewer = visible 0 why blocked viewer_told 0. Discovery only: the throttle rows and ast_request are not behind the door. This supersedes the NOT LIVE note of the 1790375110 row for the MCP door. |
| 2026-09-26 | YS4 | land | W10 SEAT FRONT-DOOR-YOUTH family_consent WIRED on the CONNECT front door (workflow plan-connect-frontdoor- row 9): fam_guardian_consent over a synthetic family of two (the youth and one adult, linked as guardian when linked is 1, in a circle state with no ring) under knowledge/connect_family.conf and a jurisdiction row the caller states the way juris_rules answers it; self_at builds the take-control history through fam_age_up, and an impossible history (a minor taking control under the strictest line) is refused history_not_built with no decision. The FIX-YOUTH FAM_SELF_HELD fix now answers through the door (nx_connect_api_gate T28 and neg-control T29, RED on the pre-change lib, GREEN on the NAS). Live: the linked guardian of a twelve-year-old by the sourced rank 2 under the strictest line = consented, consent live, guardian holds; after the youth took control at 16 under a sourced row a guardian claiming 15 = -118 self_held, holder self. Still owed: debt 1790372889 (the family strictest line versus jur_rules_for for ages 13 to 17). This supersedes the NOT LIVE note of the 1790375560 row for the MCP door. |
| 2026-09-26 | YS5 | queue | RESUME-CRYPTO-REALM debt outcomes, each read back from its job artifact: 1790372740 (leak) DEBT-EATEN job 1790439193; 1790372741 (nonce) DEBT-EATEN job 1790439185, superseded by 1790438989 (per-device keys, the nx_mls_group schedule extracted into an importable lib, store dedup by sender and client msg id riding 1790372726); dependency growth measured by the franking gate filed as 1790439040 (hmac_sha256 about 26 KiB per call, cseal_seal about 8 KiB per call inside the ChaCha20-Poly1305 encrypt, 32 B nonce and aad bumps), for the nx_hmac, nx_connect_seal and AEAD owners. The franking lib still has no importer but its gate (grep corpus_complete=1), so franking_verify stays not_yet_wired in nx_connect_api_lib and nothing is live on the alpha from this leg. |
| 2026-09-26 | YS1 | measure | BR-ART24 wave 12 (T0 1790437756): Lei 15.211 Art 24 de ate 16 (dezesseis) anos de idade read against every official source reachable today. (1) The Act, Senate publication rf_8da92722.raw (pin 4159a3ac re-verified): exactly two age phrases in 111114 B, Art 9 menores de 18 (dezoito) anos de idade and Art 24 de ate 16, zero incompletos, and Art 2 par 1 applies the concepts of ECA Art 2. (2) The ECA, Senate original rf_a5beccbf.raw (sha256 4e73870e) and Camara compiled text rf_2ef6814f.raw (sha256 48537eb3): Art 2 a pessoa ate doze anos de idade incompletos and Art 36 a pessoa de ate 18 (dezoito) anos incompletos (the compiled ECA's only de ate phrase), so the ECA spells an exclusive ate bound with incompletos and on the bare text Art 24 leans INCLUSIVE. (3) The regulating Decreto 12.880 de 18/03/2026, Senate publication rf_c437b91e.raw (sha256 bbfaede7, complete through Art 54): zero age numbers, and its Art 20 lets MGI offer a vinculacao solution with no band. (4) The official joint FAQ Perguntas e respostas sobre o ECA Digital, atualizado em 30 de julho de 2026, elaborado por ANPD, MJSP and Secom/PR (linked from the gov.br/mj Sedigi ECA Digital page; rf_1cf8a78e.raw sha256 1aac3137, 115924 B ending in %%EOF; text by nx_pdf_text in rf_1cf8a78e.txt): Para usar redes sociais, criancas e adolescentes menores de 16 anos deverao ter contas vinculadas aos seus responsaveis; and Se o usuario tem menos de 16 anos, a conta deve estar ligada a de um dos responsaveis legais. DECISION: EXCLUSIVE with an official source (the enforcing authority's published reading decides; the textual counter-reading stays in the row note). No secondary commentary was fetched because the official text is not silent. Not read: ANPD's own site (its search answered a maintenance page titled Estamos em manutencao with status 200) and the Camara or Senate reports on PL 2628/2022 (Camara id 2477340). |
| 2026-09-26 | YS1 | land | BR-ART24 wave 12: knowledge/connect_jurisdictions.conf BR row Lei-15211-2025-ECA-Digital-Art24 consent-below 17 to 16 under CAS (the probe answered content-hash h709765f670eb961b at 9530 B; edit OK 9530 to 11460 B; read back: the row reads SOURCED 16, one READING SETTLED note, the old inclusive sentence gone); read date 2026-09-26; the note carries both FAQ sentences with pins, the decree and ECA evidence, and the condition for going back to 17 (a binding ANPD act or a court reading the Act inclusively); only the BR row was touched. nx_connect_juris_gate via /api/gate_run: before, 92/92 GREEN with prod_strictest_consent_below=17 on 9530 B; after, 92/92 GREEN on SUBJECT bytes=11460: rows 10 = admitted 5 + unsourced 5 + refused 0, strictest line rows_used 5, consent below 16 (EU GDPR Art 8 and BR now agree), method rank 2 verifiable_parental_consent, min account age none, barred band none. Knock-on: every undeclared, unsourced or rowless place's strictest line drops from consent below 17 to consent below 16. Owed to the youthsafety refs owner: a refs row br_ecadigital_faq_20260730 for the FAQ mirror knowledge/fetched/rf_1cf8a78e.raw. |
| 2026-09-26 | YS1 | lesson | An age phrase can read one way on a statute's bare text and the other way in the regulator's published guidance: the ECA drafting convention (incompletos marks an exclusive ate bound) puts a 16-year-old inside de ate 16 anos, while ANPD, MJSP and Secom write menores de 16. The estate follows the enforcing authority's explicit reading and keeps the textual counter-reading in the row, so a later binding act flips one field back. Also: a gov.br site search served a maintenance page with status 200, so read the title of every fetched page before citing it, and a PDF mirror is read through nx_pdf_text (kerning splits words, so probe short tokens such as 16 and vincula, never whole phrases). |
| 2026-09-26 | YS1 | land | wave 11 seat sourced the YS1 table (knowledge/connect_jurisdictions.conf 11460 B, 10 rows, to 26401 B, 18 rows; admitted 5 to 13, unsourced 5, refused 0), every admitted row with a mirror pinned by nx_filehash and read 2026-09-26: AU Online Safety Amendment (Social Media Minimum Age) Act 2024 SOURCED as a barred band below 16 effective 2025-12-10 (the Act read in the Register's Word form through nx_docx; the day read from the Minister's notifiable instrument F2025N00628, found through the Register API api.prod.legislation.gov.au; the enforcement Act No. 83 of 2026, commenced 12 Sep 2026, doubles penalties and changes neither age nor duty); EU DSA Art 28 SOURCED as a duty with four dashes (EUR-Lex TXT/HTML served 840293 B, applies from 17 Feb 2024 by Art 93(2)); ES LOPDGDD Art 7 consent below 14; NL UAVG Art 5 with GDPR Art 8 consent below 16; IE DPA 2018 s31 below 16 (commenced 25 May 2018 by S.I. 174/2018); DE sets no Art 8 age (BDSG read whole, no Art 8 citation), GDPR 16; FR LIL Art 45 below 15 by joint consent (CNIL copy dated 15 Nov 2024); IT Codice Art 2-quinquies below 14 (Garante testo coordinato PDF, witnessed lower bound 30 Dec 2025); IN DPDP Act s9 read (consent below 18 by verifiable parental consent) but kept UNSOURCED for an unwitnessed commencement; FR Loi 2023-566 and PL named UNSOURCED (Legifrance and the Sejm API fail the fetcher TLS path); US-UT 13-71 code viewer read (one version, effective 1 Oct 2024) but no court source for what the litigation left in force, still UNSOURCED; nx_connect_juris_gate GREEN 92/92 on the production table through /api/gate_run, no tooth changed (FR stays strictest because of the UNSOURCED Loi 2023-566 row) |
| 2026-09-26 | YS1 | measure | partition 18 = 13 admitted + 5 unsourced + 0 refused; strictest line folded from all 13 in-force rows (the gate's second walk agrees): consent below 16 by verifiable parental consent AND accounts barred below 16, no minimum age; at wave start it read consent below 17 VPC with no barred band; two moves, only one by this seat: the BR row was set to 16 earlier the same day by another seat citing the ANPD, MJSP and Secom guidance of 30 Jul 2026 (so the open Art 24 de ate 16 anos question now reads exclusive, not inclusive), and the barred band is AU s63D admitted by this seat; that band now reaches every undeclared declarant and every place with an UNSOURCED row (US-UT, FR, IN, PL) or with no row, so a floor below 16 there answers refuse-barred-age-band; nx_connect_api_lib juris_rules (the alpha /api/v1 verb, wave-10 owned) reads the same table, so the alpha answer for those declarants changed with the data; nx_connect_api_gate T18 asserts no strictest value and is unaffected; OPERATOR DECISION OWED: keep the strictest line as the field-wise max over every country (the table's rule, now a global under-16 bar for the undeclared) or give a tainted place a narrower fallback |
| 2026-09-26 | YS1 | queue | owed to finish YS1 sourcing: (1) the TLS rungs that blocked three official hosts, each measured four times: legifrance.gouv.fr ServerKeyExchange signature (t12-ske-signature rc=-405), api.sejm.gov.pl TLS 1.3 only (alert 40), gazzettaufficiale.it cert pipeline (t12-cert-pipeline rc=-210); infrastructure.gov.au and esafety.gov.au t12-unknown; parlinfo.aph.gov.au 403; (2) the DPDP s9 commencement notification (then IN is admitted, PENDING until its date); (3) Utah 13-71 Part 2 text (the xml download) and the NetChoice v. Reyes docket status from the court, and the UT App Store Accountability row; (4) the AU Age-Restricted Social Media Platforms Rules 2025 F2025L00889 and its 2026 amendment for the platform scope; (5) method classes for FR joint consent and BR guardian-linked accounts; (6) Loi 2023-566 and any later French law, then the FR production tooth must be updated deliberately when FR turns declared |
| 2026-09-26 | W11-GATES | measure | Cross-reference from the CONNECT board (rows 1790439620, 1790439660 and 1790440140 on connect.plan): two youth-safety invariants on the connect activity and service libs were enforced in code but reached by NO tooth, found by deleting the guard and watching every old tooth stay GREEN. (1) nx_connect_activity: an adults-only activity admitting a minor (CAV_YOUTH_CLOSED) and a minor founding, leading or judging a team (CAV_MINOR_LEADER) -- 59 of 59 old teeth GREEN with those guards deleted; nx_connect_activity_gate now 67 teeth, RED 61 of 67 on that mutant, GREEN 67 of 67 on the shipped lib, promoted 9d33e418, rostered. (2) nx_connect_service: a stranger closing someone else's need or withdrawing someone else's share listing (CSH_NOT_PARTY) -- no other check stops it; nx_connect_service_gate now 135 teeth, promoted 2ea48cf4. The existing two-deep teeth (a youth round cannot start or be left below two adult leaders; a minor never shares one to one with an unrelated adult) were already killing mutants and are unchanged. |
| 2026-09-26 | RACI-UNIFY | land | connect-youth-safety is now routable by the estate: nx_orchestrate_raci resolves Accountable=auditor, Responsible=auditor and security, Consulted=referee, legal and supervisor, Informed=operator from the one RACI authority knowledge/store/raci (it answered deny no-accountable-role at 1790437400, before the reviewed append of the 39 CONNECT cells, debt 1790360611). Workstream organ none bound: the named placeholder stays until the youth-safety gates bind; the audit ritual audits mechanisms, never members. |
| 2026-09-26 | YS1 | land | nx_connect_juris_gate SHIPPED 948eb9af (was fa2d47ab) through nx_organ_ship: seven production teeth for the rows sourced this leg (AU declared, AU barred below 16, an AU floor of 15 refused as a barred band, ES declared, ES parental consent below 14, ES method parental_consent, and neg-control a Polish declarant whose only row is UNSOURCED gets the strictest line) and the French tooth RENAMED with its assertion unchanged (France now has a sourced Art. 45 row beside the UNSOURCED Loi 2023-566 row, so the old words no sourced row were false; the one lost run, approved by allow_loss_v1 754962c9); behavior reviewed (review ba10ca47, observation 6c868a25); qualify run and the served /api/gate_run both 99/99 GREEN on the production table; the new teeth are RED on the pre-leg table by derivation (AU was UNSOURCED so how read strictest-unsourced, ES and PL had no row so how read strictest-no-row), not by an executed run, because the pre-leg bytes were edited in place |
| 2026-09-26 | YS2 | land | W11 SEAT CIRCLES-CONSOLIDATE (debt 1790372882): ysf_peer_may_connect is now the rule the circles channel answers with -- nx_connect_circles ccl_channel hands every minor-to-minor pair to it over a request filled from the circles rows (youth band rows set by ccl_set_youth_band, the policy installed by ccl_set_youth_policy) and names its refusals CCL_FAR_BAND, CCL_YOUTH_BAND and CCL_YOUTH_POLICY; with the production conf (4 bands, span 0 UNSOURCED) a same-band pair still befriends and a first-to-last-band pair is refused one to one exactly as ysf refuses it (circles gate SHIPPED 6c9b9dc3, 95/95; RED 85/95 on the planted old decision). YS4: fam_guardian_consent is the door a guardianship comes into being through, only for an adult the youth named and only inside their own verifiable consent (family gate SHIPPED 42474d04, 94/94; RED 88/94 on the old code). Detail and hashes on connect.plan rows 1790440700 to 1790440706. |
| 2026-09-26 | YS2 | land | W10 ALPHA-REBUILD: youth_peer (YS2), antistalk_discover (YS3) and family_consent (YS4) now answer behind the ALPHA HTTP door too, https://nishifamily.com/alpha/connect/api/v1/<verb> on build ac638880 (the in-process ca_dispatch over api lib 26d83c5b), supplementing rows 1790439080 to 1790439082 (MCP door). Proven over the edge by nx_connect_alpha_api_gate b21e7939: RED 22/32 on the previous alpha e8ef423a (all three 501 not_yet_wired, job 1790440293) and GREEN 32/32 on ac638880 (job 1790441771): same-band minors 200 allowed 1, far-band pair 200 far_band allowed 0 (neg-control), antistalk shown and a blocked viewer not shown (neg-control), a linked guardian consents and a non-guardian is refused (neg-control); every reply stored 0. Visual review of the alpha pages after this build is UNMEASURED; production /connect does not mount the api door. |
| 2026-09-26 | YS5 | land | W13 SEAT LEAKS: the franking SENDER and RECIPIENT paths no longer grow VmSize. mfr_frank and mfr_receive seal and open through nx_connect_seal's new caller-owned workspace (cseal_seal_ws and cseal_open_ws over the incumbent arena AEAD, one mapping per call): nx_connect_franking_gate RED on the old lib (qualify job 1790455105: 1280 KB over 128 franks at 4096 B, 58112 KB over 52428 franks at 1 B, 57344 KB over 52428 receives at 1 B, mapping count 6 to 7) and GREEN 88/88 on the new with the chat-store migration of another seat landed beside it (job 1790456802: 0 KB, 0 KB, 0 KB, maps 6 to 6; workspace KAT byte-identical to cseal_seal at 1, 63, 64, 65 and 4128 bytes). The franking gate is NOT re-shipped by this seat (its source also carries the store seat's migration, whose content adjudication is theirs); the seal gate shipped de950bbb. Detail on connect.plan CRYPTO-LEAK rows 1790456950 to 1790456952; debts 1790456844 and 1790456748. |
| 2026-09-26 | YS1 | measure | W14 SEAT LAWS-MEMBERSHIP-COUNTRIES: the order to source countries in is the Church's own membership figures, read 2026-09-26 from newsroom.churchofjesuschrist.org/facts-and-statistics (worldwide 17,887,212, knowledge/fetched/rf_bd39cbcf.raw sha256 d31ecdda...) and its country pages, every countryStatistics block lastUpdatedDate Wed Apr 29 2026: US 6,929,770 (rf_046abdcb) / BR 1,573,360 (rf_f976c1c5) / MX 1,572,287 (rf_124095c6) / PH 905,082 (rf_3ecc9706) / PE 667,836 (rf_359ef7fd) / CL 624,203 (rf_e8943726) / AR 505,819 (rf_a0bc78ba) / GT 297,143 (rf_74e5bcd2) / EC 279,046 (rf_ed9c6f64) / NG 274,043 (rf_af6c9b20) / BO 235,773 (rf_220d72e7) / CO 223,090 (rf_50652be7) / CA 211,581 (rf_fa9effb9) / HN 197,073 (rf_f1963e25) / VE 179,389 (rf_4b4b38d0) / DO 156,358 (rf_fbb60796) / SV 132,399 (rf_4bdee5db) / GH 122,978 (rf_e8dc7760); the ranking covers the 18 country pages fetched, not every country (GB, AU, JP, CD, UY, PY, NZ and the Pacific nations were not fetched and can sit anywhere below MX), so it is an order of work, not a census |
| 2026-09-26 | YS1 | land | W14 LAWS-MEMBERSHIP-COUNTRIES rows under CAS in knowledge/connect_jurisdictions.conf (26803 B to 43402 B, five CAS edits, each hash taken from the writer's own refusal): ADMITTED CL Ley 21.719 Art 16 quater (BCN LeyChile XML rf_67f7b8a6, consent below 14 by padres o representantes legales, PENDING until 2026-12-01 by its transitorio), CA OPC Guidelines for obtaining meaningful consent (rf_50411e5a, the regulator's position under 13, Date modified 2025-08-11), CA-QC P-39.1 s4.1 and s14 (LegisQuebec rf_5f874e5b, consent below 14 by the holder of parental authority or the tutor), PE Reglamento Ley 29733 DS 016-2024-JUS Art 22 and Art 25 (El Peruano pages republished by the ANPD, rf_901a8960, consent below 14 by patria potestad or tutela, in force 2025-03-31) and IN re-admitted from UNSOURCED as PENDING (DPDP Rules 2025 G.S.R. 846(E) of 2025-11-13, rf_2d79c142: r1(4) puts rule 10, verifiable consent of the parent, in force eighteen months after publication, so consent below 18 by verifiable parental consent from 2027-05-13); UNSOURCED with what was read and what is owed: EC, MX, PH, AR, CO, NG, GH, PL (re-noted) and US-UT 13-71 (re-noted: chapter XML rf_a2754bd1 read, no account bar or consent-to-open, litigation status unread); /api/gate_run nx_connect_juris_gate 99/99 GREEN on the new table before the gate change: rows 29 = admitted 18 + unsourced 11 + refused 0, strictest line folded from 16 in-force rows = no minimum account age, consent below 16, method verifiable parental consent (rank 2), barred below 16 (unchanged by this leg: the new in-force lines are 13 and 14) |
| 2026-09-26 | YS1 | land | nx_connect_juris_gate SHIPPED 04286dee (was 948eb9af, banked first at knowledge/fetched/bank_nx_connect_juris_gate_pre_1790461100.elf, sha256 948eb9af verified) through nx_organ_ship: thirteen production teeth pin this leg's rows (PE declared, PE consent below 14, PE method parental_consent; CA-QC declared, folds 2 rows, consent below 14; CL strictest-no-row while PENDING and declared with consent below 14 on 2026-12-01; IN strictest-no-row while PENDING, consent below 18 by verifiable parental consent on 2027-05-13, and the strictest consent-below of an undeclared place rising to 18 on that day, emitted as prod_strictest_consent_below_on_2027_05_13=18); content GREEN (no lost run), behaviour DIFFERS as expected (more teeth); qualify run and the served /api/gate_run both 112/112 GREEN; the new teeth are RED on the pre-leg table by derivation (PE, CA-QC and CL had no row so how read strictest-no-row and the 2026-12-01 CL tooth cannot read declared; IN was UNSOURCED so how read strictest-unsourced and no 18 could enter), not by an executed run, because the table was edited in place |
| 2026-09-26 | YS3 | land | W14 SEAT LISTING-AND-COUNTRY: ast_may_discover now decides listing discovery on the CN17 service and share board, not only the contact request. nx_connect_service csh_may_see asks it on the circle-list path for every need and share listing: a block hides existence both ways and a match across it reads CSH_INVISIBLE (the answer a stranger gets, no retaliation signal); a non-guardian adult who shares only an opt-in ring never learns a minor's listing exists (AST_WHY_MINOR_OPEN_RING) while the minor's linked guardian and a peer minor still do, and inside an in-person vouched ring the two-deep wall still answers WALLED; with no antistalk state installed nothing is listed. Service gate RED 155/171 (job 1790459935), GREEN 171/171 (job 1790460315), SHIPPED 19e5814c; the served share_match verb carries it (nx_connect_api SHIPPED 7980400c; api gate SHIPPED 9afbeeb7, T23 INVISIBLE on the worldwide ring and WALLED in the vouched ward). Debt 1790457815 EATEN, superseded by 1790461582 for the remaining faith discovery rule (cfa_discover). Detail on connect.plan CN17 row 1790461700. |
| 2026-09-26 | YS1 | land | W14 SEAT LISTING-AND-COUNTRY: the juris lines now gate sign-up itself (CN13 csu_signup_admit through csu_juris_admit). With Australia's under-16 bar in the strictest line, a minor who declares no place is refused by name (CSU_REFUSED_COUNTRY_REQUIRED) instead of being judged by the strictest line in silence; a SELF-DECLARED place (ISO 3166-1 alpha-2 with an optional ISO 3166-2 subdivision, never IP, never a device signal) is judged by jur_rules_for plus jur_account_decision over the caller's table against the attested band's youngest age, and each outcome refuses by name (COUNTRY_FORM, JURIS_TABLE fail closed, JURIS_BARRED, JURIS_UNDER_MIN, PARENTAL_CONSENT unless a verified guardian consent meets the method rank the law names) or admits; an adult may leave the place undeclared and the place is never stored. Signup gate production teeth on knowledge/connect_jurisdictions.conf: an AU minor at 15 refused JURIS_BARRED (Online Safety Act 2021 s63D), a US minor at 12 without verified guardian consent refused PARENTAL_CONSENT (16 CFR 312.2); fixture teeth on user-assigned codes XA, XB, XC for every refusal, the consent route on the same challenge, and a missing table. RED job 1790460544, GREEN 85/85 job 1790460800, SHIPPED f60018f5. Detail on connect.plan CN13 row 1790461701. |
| 2026-09-26 | YS1 | lesson | W14 LAWS-MEMBERSHIP-COUNTRIES: a legal line blocked by transport or extraction is the strictest line, never a guess, and two instruments failed silently in the direction that would have invented absence: nx_pdf_text exits 0 on unmapped fonts (the Diputados LFPDPPP and Codigo Civil Federal, the NDPC Act and a GovInfo opinion all extract with the key words 0 or 7 times in hundreds of KB) and reads the Polish Official Journal lossy, so a zero from it proves nothing (debt 1790461733); and a WebSearch summary attributed the Mexican minors-consent rule to the LFPDPPP when the DOF text puts it only in the public-sector LGPDPPSO (bytes 774161 and 783431, before the LFPDPPP's Articulo Tercero at byte 1088642), caught only by partitioning the decree by its article offsets; a statute's silence on minors is not an age line either: MX, PH and AR read silent or maturity-based and stay UNSOURCED rather than being encoded as no line (an acquittal); the TLS rungs blocked five more countries' official hosts (debt 1790461725, recurrence of 4514) |
| 2026-09-26 | YS1 | queue | W14 worklist in membership order after this leg (table 32 rows = 18 admitted + 14 unsourced + 0 refused, gate 112/112): MX civil capacity (a text-mapped official Codigo Civil Federal; LFPDPPP 2025 read silent) / PH civil capacity (RA 10173 read silent; the Civil Code articles and any NPC issuance) / AR (the Res 4/2019 annex criteria; the AAIP proposal of consent from 16 once adopted) / GT, BO, HN (nothing fetched; no data statute known to the seat; civil codes and gazette searches) / EC (the Registro Oficial text of LOPDP Art. 21 and a settled scope for its 15-year sentence) / NG (the NDPA 2023 text; both NDPC copies were a font-less PDF and a WordPress shell) / CO (every official host refused TLS) / GH (certificate pipeline) / VE, DO, SV (not attempted) / IN (the s1(2) S.O. naming s9's own date; the row is PENDING 2027-05-13 on Rules r1(4)) / US-UT (the injunction and the Tenth Circuit docket from a court) / PL (a lossless text of the 2018 Act) / FR Loi 2023-566 and US-UT App Store Act (earlier legs); a design question for the table owner, not the operator: whether a civil-capacity reading (minors act through their representatives below the age of majority) may be admitted as a consent line for places whose data statute is silent, since the strictest line (consent below 16, barred below 16) is less strict on the consent axis than a majority-18 representation rule for a 16- or 17-year-old |
| 2026-09-26 | YS1 | measure | W14 close: knowledge/connect_jurisdictions.conf 49715 B sha256 90551334346cf0f02af6da7c0fcfa6c8b43ba08aaec8ef136491f672f9a7cbd8 after later UNSOURCED rows (AR re-read with AAIP Res 4/2019 and a not-in-force AAIP proposal of consent from 16; MX re-read from the DOF decree, LFPDPPP 2025 silent on minors; PH re-read from the NPC copy of RA 10173, silent; GT, BO, HN named NOT READ; DO Ley 172-13 fetched but font-less; SV Decreto 144 refused by the certificate pipeline; CO two more official hosts refused); served /api/gate_run nx_connect_juris_gate (build 04286dee) 112/112 GREEN: rows 34 = admitted 18 + unsourced 16 + refused 0; strictest line folded from 16 in-force rows = no minimum account age, consent below 16, verifiable parental consent (rank 2), barred below 16; on 2027-05-13 the strictest consent-below rises to 18 when the IN row takes effect |
| 2026-09-28 | RANK | measure | W16 BOARD-TREATMENT-AND-RANK MAP (nx_compare_rank youthsafety job 1790613342, exit 0, youthsafety.rank sha256 64b7c088): TARGET VERSION 1.0 (M2 Reports and proof without surveillance); rungs 7, done 5, open 2. FINISH first: YS5 mfr_report_verify is imported only by validation organs (LIB-GATE-ONLY) and needs a caller in a shipping program. Critical path: 1 YS7 sensitive-image flag for the device, never a server scan, priority 400 -- cmf_device_blur_flag: an attachment to or from a minor carries a flag telling the receiving device to blur it until tapped, the server never inspects the image and an adult lane is unaffected, graded against Discord blurred sensitive content for teens where the rivals lead today; 2 YS6 no-tracking census over the connect serving path, priority 133 -- cnt_tracking_census refuses any IP geolocation lookup, device fingerprint or cross-session behavioural profile store, names every offender, is bite-proven with a planted lookup and is wired so a build that adds tracking is refused. Ladder LADDERED (3 dated targets, 7 of 7 rungs placed). Barfresh FRESH (SB-YS-APPS and SB-YS-AGE fresh at 2026-09; SB-YS-E2EE 2025-07, SB-YS-GROOM 2025-03 and SB-YS-LAW 2025-07 attested this month as the newest in their listings). The gap to T-BIC-YOUTH closes with YS7, to T-FRONT-STRUCTURE with YS6, to T-FRONT-E2EREPORT with the YS5 wiring. Treatment NO-TREATMENT: by the ruler's own definition YS1 to YS5 would read five-present (nx_connect_juris_gate, nx_connect_youthsafe_gate, nx_connect_antistalk_gate, nx_connect_family_gate and nx_connect_franking_gate each on tool_allowlist.conf and on gateroster.conf, their libs present, the youthsafety-audit plane manifest present), but that workflow cannot run: nx_plan_run youthsafety-audit refused managed-owned-definition-required, execution NOT_STARTED (job 1790613707). Not declared, so this board claims no workflow that cannot execute; the five become declarable once youthsafety-audit is bound as an owned workflow (debt 1790614098). Observed, not touched: nx_connect_juris_gate BUILT 125872 B vs PROMOTED 115312 B. |
| 2026-09-28 | RANK | land | W16 PUBLISHED: nx_compare_regen_scoped --domain youthsafety (job 1790614459) verdict=GREEN, index.html 194289 to 332353 B, api.json 35640 B; nx_page_verify https://nishifamily.com/compare/youthsafety/ (job 1790614494) status 200 bytes 332353 a11y-issues 0 broken 0 VERDICT=GREEN (static checks; browser rendering unverified). |
| 2026-09-28 | YS3 | land | W16 SEAT FAITH-RANKING closed the last discovery rule outside the owner (debt 1790461582, the item row 1790461702 left open): nx_connect_faith cfa_discover is ARCHIVED (knowledge/retired/nx_connect_faith.cfa_discover-20260928-wave16.nx, mining receipt on connect.plan CN15) and faith is a RANKING signal over exactly the members nx_connect_antistalk ast_may_discover shows on the search path (cfa_rank_visible): a member the owner hides stays hidden whatever their faith, a withdrawn-consent member contributes no signal and ranks where a member who never declared ranks, and a minor never surfaces to an unrelated adult (the owner's AST_WHY_MINOR_ADULT, with the guardian neg-control). Faith gate SHIPPED 4674e517, served /api/gate_run GREEN 96/96 (job 1790615054); RED 71/90 on the old lib (job 1790613393) and 74/96 on a planted revert to cfa_discover (job 1790614445). FOR THE OWNER OF ast_may_discover: the retired peer band also kept adults out of a MINOR's faith query (a minor never listed an adult sharing their ring); the owner shows those adults on the search path, so that half is NOT carried -- if youth search should not list adults at all, it is a rule for ast_may_discover where every read path inherits it, never a second rule in one lane. NOT LIVE: the ranking has no serving caller (request to wave 17 FRONTDOOR-FINISH, connect.plan row 1790615101). |
| 2026-09-28 | YS1 | measure | W16 SEAT LAWS-CONTINUED (T0 1790613413, redo of the wave-15 seat that died with no rows): wave 15's partial work was found in the sources, not the boards -- the SOURCED-SILENT grammar in nx_connect_juris.nx (edited 1790465648) and jg_silent_teeth plus production teeth expecting MX, US-UT and a silent row in nx_connect_juris_gate.nx (1790466225, built 125872 B, never promoted), while knowledge/connect_jurisdictions.conf was still the W14 close (49715 B sha256 90551334, banked this leg at knowledge/bank/connect_jurisdictions.conf-pre-w16-1790614100, gate 04286dee banked at knowledge/bank/nx_connect_juris_gate.elf-pre-w16-1790614100, both hash-verified). Sources read 2026-09-28 from official copies: MX Codigo Civil Federal texto vigente (ultima reforma DOF 14-11-2025) in the Camara de Diputados Word form doc/CCF.doc (rf_a6d5cb6f.raw sha256 75bc335c, the 8-bit text reads directly where the PDF has no font maps): Art. 646 mayor edad a los dieciocho anos cumplidos, Art. 23 incapaces contract through their representatives (2020 exception: a bank account from 15), Art. 424 no obligation without the express consent of whoever holds the patria potestad, Art. 450 I, Art. 635 and 637, Art. 148 marriage at 18; MX LGDNNA texto vigente (DOF 15-01-2026) doc/LGDNNA.doc (rf_a8aa5897.raw sha256 2fdc6ea7): Art. 76 privacy and data protection plus the parents' duty to guide, supervise and restrict, Art. 77-78 media, Art. 101 Bis to 101 Bis 3 ICT access and safe internet, no account line; MX LFPDPPP decree transitorio Primero (in force 2025-03-21); PH NPC Circular 2023-04 Guidelines on Consent (rf_0754956a.raw sha256 260acf8e): 27 sections, no minors provision, Section 1 leaves the Civil Code framework on obligations and contracts unmodified; PH NPC Advisory 2024-03 Child-Oriented Transparency (rf_3a794d6e.raw sha256 6e792767): a child is below 18, child-readable notices, breach notice to children and parents, no account line; US-UT 13-76 identified as le.utah.gov/xcode/Title13/Chapter76/C13-76_2025050720250507.xml (rf_168b786d.raw, re-fetched to the same sha256 02433db4): obligations Beginning May 6, 2027 (2026 GS ch. 157), 13-76-202(4)(a) no contract enforced against a minor without verified VPC; US-UT 13-71 re-read: VPC only to change the default privacy setting (13-71-204), no account line. NOT READ: the PH Civil Code and Family Code (Official Gazette status 403 twice, Supreme Court E-Library t12-cert-pipeline rc=-209 four tries), Ecuador's SPD (spd.gob.ec and www t12-connect rc=-2) |
| 2026-09-28 | YS1 | land | W16 LAWS-CONTINUED: knowledge/connect_jurisdictions.conf 49715 B to 63048 B (sha256 a3927401a54bf1bec7bbffde42f8594a942c691bf303a06d2e9f17cd6fdd56fc) in twelve size-CAS edits (one ETIMEDOUT reply had not landed: size unchanged and the new phrase counted 0, the self-adjudicating re-issue landed), 34 rows to 40: MX split into CCF-Art646-Art23-Art424-civil-capacity SOURCED consent below 18 by parental_consent (in force, witnessed 2025-11-14; declared imprecision: the 32 state codes not read), LGDNNA-Art76-Art101Bis-duties SOURCED four-dash, LFPDPPP-2025 SOURCED-SILENT (2025-03-21); PH split into RA-10173 SOURCED-SILENT, NPC-Circular-2023-04 SOURCED-SILENT, NPC-Advisory-2024-03 SOURCED four-dash and Civil-Code-Art1327-with-Family-Code-Art234-RA-6809 UNSOURCED (so a Philippine declarant still gets the strictest line); AR split into Ley-25326 SOURCED-SILENT and CCyC-Art26-progressive-autonomy UNSOURCED (the old note kept); US-UT 13-71 admitted SOURCED four-dash (an injunction can only take duties away, never add a line) and 13-76 admitted SOURCED PENDING consent below 18 by VPC from 2027-05-06; the header documents SOURCED-SILENT and when a four-dash duty row may stand. The grammar is wave 15's (row-level: read and silent, admitted, counted apart, never taints, never draws; place-level: a place whose in-force rows are all silent gets the strictest line, how strictest-silent) -- kept, because a statute's silence settles nothing about the place's civil-capacity law, and the place-level no-line answer already exists as a SOURCED four-dash row. nx_connect_juris_gate: wave 15's silent teeth kept; this leg replaced its MX tooth (MX now declared: consent below 18, parental_consent, folds 2 rows, never the silent row), added PH and AR neg-controls (a silent row beside an UNSOURCED civil row must not acquit), renamed the 2027-05-13 tooth (rises to 18 became is 18) and pinned today's strictest consent-below 18. EXECUTED RED ON THE OLD, GREEN ON THE NEW: the new gate over the pre-leg table 151/161 RED (job 1790614502: the silent, Utah, MX and strictest teeth) and 161/161 GREEN over the new table (job 1790614919); the served old gate 04286dee over the new table 110/112 RED (job 1790614931: the old lib REFUSES the 4 SOURCED-SILENT rows and its Utah tooth expected UNSOURCED). nx_organ_ship refused at stage 4 twice (jobs 1790615016, 1790615048): loss approved allow_loss_v1 9e16adbb (2 lost runs, both superseded tooth names, record knowledge/status/harness/loss-9e16adbb...record) but no qualified behavior observation exists by construction (the live gate is RED on the new table, osb_qualified needs both exits 0); PROMOTED through /api/promote expect_sha256 bd49f3ced7dea7093ed2aa1be574c7a80bd6a0ace663c004255cc2a80b96201c (job 1790615180, prev banked), _offc twin installed (job 1790615205), nx_job_run of the promoted binary 161/161 GREEN (/tmp/juris_gate_w16.out 19141 B) |
| 2026-09-28 | YS1 | measure | W16 partition and strictest line on the production table after this leg (promoted gate bd49f3ce, 161/161 GREEN via nx_job_run and in the qualify run): rows 40 = admitted 27 + unsourced 13 + refused 0; admitted 27 = pending 3 (CL 2026-12-01, US-UT 13-76 2027-05-06, IN 2027-05-13) + out-of-scope 0 + SOURCED-SILENT 4 (MX LFPDPPP, PH RA 10173, PH NPC Circular 2023-04, AR Ley 25.326) + in-force line rows 20; the strictest line folded from the 20 in-force rows = no minimum account age, consent below 18 (was 16: the MX Codigo Civil Federal row), method rank 2 verifiable_parental_consent, barred below 16 (AU s63D); on 2027-05-13 consent below stays 18. Declared answers: MX = declared, consent below 18 by parental_consent (2 rows folded); US-UT = declared, consent below 13 by VPC (US COPPA plus the 13-71 duty row) and below 18 by VPC from 2027-05-06; PH and AR = strictest-unsourced (their civil-capacity rows are UNSOURCED; the silent rows neither taint nor acquit). KNOCK-ON: every undeclared declarant, every place with an UNSOURCED or refused row (PH, AR, FR, PL, EC, CO, NG, GH, GT, BO, HN, DO, SV) and every rowless place now reads consent below 18 by VPC plus the under-16 bar, so a 16- or 17-year-old there needs verified guardian consent where the old line allowed them; CN13 sign-up already refuses an undeclared minor by name. CONSUMERS NOT REBUILT: nx_connect_api (juris_rules verb), the signup gate and both connect_appd builds compile the OLD lib, which REFUSES the 4 SOURCED-SILENT rows -- fail-closed (MX, PH and AR read strictest there, and the partition shows refused 4) until each is rebuilt on its owner's lane. SERVED /api/gate_run FAST for this gate reads exit 141 RED (job 1790615207): the 16384 B capture cap closes the pipe and the gate's 19141 B of output dies of SIGPIPE -- the gate is GREEN; debt 1790615554 (sev 6) names the transport fix; the gate roster runner captures 65536 B and is unaffected |
| 2026-09-28 | YS1 | measure | W16 BITE on the SOURCED-SILENT code of nx_connect_juris.nx through the promoted gate bd49f3ce, nx_gate_bite aimed numeric mutation, four mutants, four KILLED, zero survivors, zero not-reached: jur_rules_for site 62 (the silent-row counter, job 1790616202), jur_rules_for site 80 (if dsil > 0 then how = strictest-silent, job 1790616250), jur_row_class site 26 (the four-dashes check a SOURCED-SILENT row must pass, job 1790616335) and jur_row_class site 59 (a silent row classed SILENT, job 1790616370); every run restored the lib byte-identical (23743 B) and restored both gate twins, and the served nx_connect_juris_gate.elf and _offc twin re-hash to bd49f3ce afterwards; with the executed old-vs-new runs this is the non-vacuity proof of wave 15's grammar that wave 15 never got to take |
| 2026-09-28 | YS1 | measure | W16 SEAT LAWS-CONTINUED second run (T0 1790618451; the first run's rows 1790615600 to 1790616400 stand; its final table 64085 B sha256 96cb361e, the gate source 3969f89b and the served gate bd49f3ce were banked at knowledge/bank/connect_jurisdictions.conf-96cb361e-pre-lawscont2-20260928, knowledge/bank/nx_connect_juris_gate.nx-3969f89b-pre-lawscont2-20260928 and knowledge/bank/nx_connect_juris_gate.elf-bd49f3ce-pre-lawscont2-20260928, each verified byte-for-byte by nx_filecopy): official sources read 2026-09-28 -- PH Republic Act No. 6809 in full on the Senate Legislative Reference Bureau (ldr.senate.gov.ph, knowledge/fetched/rf_7bff9703.raw sha256 39766630): Family Code Art. 234 as amended, majority at eighteen, and Art. 236, emancipation ends parental authority and qualifies for all acts of civil life, in force on completion of publication 1989-12-18; GT Codigo Civil DL 106 in the ONSEC compilation on mcd.gob.gt (rf_416f07d3.raw sha256 6f2eaed9): Art. 8 majority at eighteen, Art. 254 the patria potestad represents the minor in all acts of civil life, Art. 1251 and 1254 capacity, Art. 2178 in force 1964-07-01; GT Iniciativa 6572 (congreso.gob.gt, rf_333ad856.raw): a data-protection bill of 8 July 2025 sent to commission on 5 August 2025 whose exposicion says Guatemala lacks such a law and whose text sets no minors' age or method; GT Ley PINA Decreto 27-2003 (albakeneth.gob.gt, rf_6a82729b.raw): no account line; VE Codigo Civil 1982 transcription (sapi.gob.ve, rf_6f5d5858.raw sha256 f7e3c2f2): Art. 18 majority at eighteen, Art. 1.144 minors incapable to contract; DO Ley 172-13 in the Gaceta Oficial pages served by the Camara de Diputados (rf_8cfee364.raw sha256 29719c24; the Presidencia copy had read font-less): Art. 79 sends minors' data to the children's code and special laws, no age; HN Codigo de la Ninez Decreto 73-96 (poderjudicial.gob.hn, rf_c8d06602.raw): under eighteen a child for all legal effects, no consent rule; BO Codigo Civil copy on obs.organojudicial.gob.bo (rf_2f81d2b9.raw) carries the unreformed 1975 Art. 4 (twenty-one) and was NOT admitted. NOT READ, the failure class named in each row: CO (cert-pipeline rc=-212 on the Corte Constitucional and the SIC, TLS alert 70 on the Cancilleria normograma, 404 on the AGN normativa), EC (Cancilleria RO copy cert-pipeline rc=-212, gob.ec recv_sh verdict 3), NG (the ndpc download page holds only a cover image, the old path 404, cert.gov.ng 403), GH (dpc.gov.gh serves Act 843 but nx_pdf_text maps no fonts), SV (asamblea cert-pipeline rc=-212), PL (the ISAP consolidated text drops every diacritic word), VE LOPNNA and the 2022 civil-code reform (asambleanacional.gob.ve recv_sh verdict 3 then alert 40), BO (silep connect rc=-2, Gaceta incomplete flight), HN civil and family codes (tsc.gob.hn cert-pipeline rc=-209). FOR THE FETCHER OWNER: recv_sh verdict 3 is NX_TLS13_RECV_SH_BAD_FORMAT (ServerHello parse failed) on gob.ec, asambleanacional.gob.ve, corteconstitucional.gov.co, tsc.gob.hn and cancilleria.gov.co, one defect class behind five official hosts. EXCEPTION NAMED: candidate URLs were triaged with the harness web search because two nx_websearch queries returned no official legal page (the Nishi index does not cover these hosts); every byte cited was fetched and pinned by nx_research_fetch |
| 2026-09-28 | YS1 | land | W16 LAWS-CONTINUED second run: knowledge/connect_jurisdictions.conf 64085 B to 77324 B (sha256 recorded in the next row) in fifteen size-CAS edits, each receipt read before the next, rows 40 to 43: PH civil row ADMITTED SOURCED consent below 18 by parental_consent (Family Code Art. 234 and 236 as amended by RA 6809, effective 1989-12-18; declared imprecision: Civil Code Art. 1327 not read, Official Gazette 403, SC E-Library cert-pipeline, PCW 403), so PH is DECLARED; GT row ADMITTED SOURCED consent below 18 by parental_consent (Codigo Civil DL 106 Art. 8 and 254, effective 1964-07-01; Iniciativa 6572 recorded as a bill that draws no line; Ley PINA read, no account line), so GT is DECLARED; VE civil row ADMITTED SOURCED (Codigo Civil Art. 18 and 1.144, 1982-07-26) beside a new UNSOURCED LOPNNA-and-data-protection row, so VE reads strictest-unsourced (it had no row); DO Ley 172-13 ADMITTED SOURCED-SILENT (Art. 79 defers, G.O. 10737 of 2013-12-15) beside a new UNSOURCED Ley-136-03-and-Codigo-Civil row, so DO stays strictest; the HN, SV, CO, NG, GH, PL, EC and BO UNSOURCED notes carry this run's reads and failures. nx_connect_juris_gate: the PH neg-control became PH declared teeth (how, consent 18, method parental_consent, 2 rows folded), GT declared teeth were added, and DO and VE neg-controls carry the old PH shape (a silent or civil row beside an UNSOURCED row must not declare). EXECUTED RED ON THE OLD, GREEN ON THE NEW: the new gate over the pre-change table 163/169 RED (job 1790620633: PH how, method and rows, GT how and method, VE how), 169/169 GREEN over the new table (job 1790621083, the same artifact by build-cache hit); the served old gate bd49f3ce over the new table 160/161 RED (job run to /tmp/juris_gate_old_on_new_lawscont2.out: only the superseded PH tooth). Content ruler live vs candidate: lost_from_live=1, the superseded PH neg-control name, gained 9. PROMOTED through /api/promote expect_sha256 815b520973f61c4555a551df292a775abaff278701d9cafce980f84bbfc89314 with allow_capability_loss=yes for that one named run (job 1790621244, prev banked), live re-hashed 815b5209 130488 B, _offc twin installed (job 1790621265), nx_job_run of the promoted binary 169/169 GREEN (/tmp/juris_gate_lawscont2_promoted.out 20430 B); served /api/gate_run FAST reads exit 141 capture_truncated at 16384 B (job 1790621288), the transport cap of debt 1790615554, every tooth inside the window PASS. QUEUE for the youthsafety refs owner: candidate ref rows for the four sources are in knowledge/status/youthsafety_refs_candidates_lawscont2_20260928.txt (9-field schema, nx_filehash pins); each needs an inline mark in the same edit or the refs gate names it UNCITED |
| 2026-09-28 | YS1 | measure | W16 LAWS-CONTINUED second run partition and strictest line on the production table (knowledge/connect_jurisdictions.conf 77324 B sha256 efdc26fba5148fa7a34caf978175cefdf98a818fa27c83473f7b3b3759b5ded9, promoted gate 815b5209 169/169): rows 43 = admitted 31 + unsourced 12 + refused 0; admitted 31 = pending 3 (CL 2026-12-01, US-UT 13-76 2027-05-06, IN 2027-05-13) + out-of-scope 0 + SOURCED-SILENT 5 (MX LFPDPPP, PH RA 10173, PH NPC Circular 2023-04, AR Ley 25.326, DO Ley 172-13) + in-force line rows 23; the strictest line folded from the 23 = no minimum account age, consent below 18, method rank 2 verifiable_parental_consent, barred below 16 (AU s63D), unchanged by this run; on 2027-05-13 consent below stays 18. Declared answers now include PH (consent below 18 by parental_consent, the Family Code row and the NPC Advisory duty row folded) and GT (consent below 18 by parental_consent); VE, DO, AR, FR, PL, EC, CO, NG, GH, BO, HN and SV read strictest. KNOCK-ON for consumers: a Philippine or Guatemalan minor of 13 to 15 is admissible with guardian consent where the strictest line barred them, and a 16- or 17-year-old needs parental_consent rather than verifiable parental consent; consumers compiled on the pre-SOURCED-SILENT lib still REFUSE the silent rows, so PH stays strictest there until each is rebuilt on its owner's lane (the new rows need no lib change) |
| 2026-09-28 | YS1 | land | W16 LAWS-CONTINUED second run, HONDURAS: the Codigo de Familia as updated by the Poder Judicial documentation centre (poderjudicial.gob.hn/Cedij, knowledge/fetched/rf_5bf963bb.raw sha256 c0bd8d618d2036a8f2adb2cc7f1ca4a02319db15986d8c1a2371f544a0d89023, reforms to Decreto 102-2018) reads at Articulo 16, as reformed by Decreto 35-2013 (La Gaceta 33,222 of 6 September 2013), La mayoria de edad se obtiene al cumplirse los veintiun (21) anos, with marriage from eighteen only by authorisation of whoever holds the patria potestad; Art. 185 and 192 keep the minor's person and goods under the patria potestad. Admitted as HN Codigo-de-Familia-Art16-Art185-civil-capacity SOURCED consent below 21 by parental_consent, beside a new UNSOURCED HN data-protection-statute row (the old combined UNSOURCED row replaced), so Honduras reads strictest and its 21 now draws the strictest consent-below of the whole table: knowledge/connect_jurisdictions.conf 77324 B to 79722 B (sha256 e5268501759813f61fcfcdf5d0d8525a39e3a0ef31b62d7209c1c9a13d5d0edd), rows 44 = admitted 32 + unsourced 12 + refused 0; admitted 32 = pending 3 + out-of-scope 0 + SOURCED-SILENT 5 + in-force line rows 24; strictest line = no minimum account age, consent below 21 (was 18), method rank 2, barred below 16; on 2027-05-13 consent below stays 21. Gate: JG_HN_MAJORITY 21, the two strictest-18 teeth replaced by strictest-21 teeth, an HN neg-control (UNSOURCED beside a SOURCED civil row must not declare) and an HN consent tooth; RED 168/171 on the pre-HN table (job 1790622032: exactly the three HN-driven teeth, strictest read 18), GREEN 171/171 on the new table (job 1790622116); content ruler lost_from_live=2, both the superseded strictest-18 tooth names, gained 4; PROMOTED /api/promote expect_sha256 b76135e5b2af20af27d4081602e1de64045883364fdaace5e1ddab43b1144f56 allow_capability_loss=yes (job 1790622223, prev banked 815b5209), live re-hashed b76135e5 131080 B, _offc twin installed (job 1790622243), nx_job_run of the promoted binary 171/171 GREEN (/tmp/juris_gate_lawscont2_hn_promoted.out 20830 B). KNOCK-ON checked before landing: csu_juris_admit judges only the MINOR band, so no adult sign-up changes; the only other production-table readers are nx_connect_signup_gate (AU and US teeth only) and nx_connect_api_gate T18 (undeclared at age 30 asserts only strictest-undeclared), so no other gate pins the strictest consent value |
| 2026-09-28 | NO-TRACKING | land | Cross-reference from connect.plan rows 1790622330 and 1790622360 (W16 SOTA-PQ-HYBRID): the live X25519-only E2E page /synth/connect_e2e was served with the edge router's injected ad slot and inline view-beacon script (38117 B served for a 37122 B file) -- a script the page did not write, running beside browser-held private keys, against the no-tracking-by-construction directive. Fixed at both ends: the emitter ce_emit_html now writes the router opt-out literal and the served page carries it (37141 B served == file, img=0, nx_page_verify job 1790621289), with the pre-fix page banked for rollback; the connect CN8 referee gains a T10d tooth that goes RED on the pre-fix page and is shipped (130fe90a). STILL EXPOSED, queued to its owner: the device sign-in page emitted by nx_connect_device_client carries the same head without the opt-out. |
| 2026-09-28 | YS1 | land | W16 LAWS-CONTINUED second run, BOLIVIA civil capacity: the Codigo Civil (Decreto Ley 12760 of 1975) as compiled with its reforms by the Oficina Tecnica para el Fortalecimiento de la Empresa Publica (otnpb.gob.bo, knowledge/fetched/rf_321f5adc.raw sha256 0cdedd11dc779f23b5cadb60a11a8606f503ac5f2d2f3f82a8a1ec41a249274d) reads Art. 4 La mayoria de edad se adquiere a los dieciocho anos cumplidos under a note naming Ley 2089 of 5 May 2000 (Gaceta Oficial No 2220), and Art. 5 makes minors incapable of acting save through their representatives; admitted as BO Codigo-Civil-DL-12760-Art4-Art5-as-amended-by-Ley-2089 SOURCED consent below 18 by parental_consent, beside the UNSOURCED row now named data-protection-and-Ley-548-CNNA (the Organo Judicial observatory copy still printing veintiun anos is recorded there as the superseded text), so a Bolivian declarant still reads strictest. DOMINICAN REPUBLIC: the Senate historical-record text of a new Codigo Civil (knowledge/fetched/rf_b7fa079b.raw sha256 74af3bb107e19278dc25de04c7d399e0e44717ae611e603611b36f59fe6111e1) with Articulo 413 minor under eighteen is a BILL (two senators sign it, no promulgation, and its transitional article keeps Decreto Ley 2213 of 1884 in force) and is recorded in the DO UNSOURCED note, not admitted. Table 79722 B (e5268501, banked knowledge/status/connect_jurisdictions.conf.bank-lawscont2-e5268501, hash-verified) to 83423 B (846296b133cffb5df9cf65f5027fa7210dc171dfb6a5ace97aca2f281aa933a4) by three CAS edits (content token h4887863cbf7d9273, then a receipt-chained size ladder 81861, 82409, 83423). Live gate b76135e5 re-run by nx_job_run (/tmp/lawscont2_gate_bo.out 20830 B): 171/171 GREEN, partition rows 45 = admitted 33 + unsourced 12 + refused 0, admitted 33 = pending 3 + out-of-scope 0 + silent 5 + in-force line rows 25; strictest line unchanged: no minimum account age, consent below 21 (HN), method rank 2, barred below 16, and 21 on 2027-05-13. No gate change: the BO row moves no declarant outcome and no strictest value, and the generic production teeth examine it (refused 0, mirror present, folded into both walks); a BO-specific tooth would only guard against a later deletion of the UNSOURCED row. Ref candidate bo-codigo-civil appended to knowledge/status/youthsafety_refs_candidates_lawscont2_20260928.txt (4778 B). |
| 2026-09-28 | YS1 | land | W16 LAWS-CONTINUED second run, COLOMBIA DECLARED: Decreto 1377 de 2013 (Diario Oficial 48.834, 27 June 2013) and Ley 1581 de 2012 with Sentencia C-748 de 2011, all read from the Compilacion Juridica de la DIAN (normograma.dian.gov.co, a TLS 1.2 host; knowledge/fetched/rf_cd7278e9.raw sha256 7b6f444bd94053ef8a011d45b4f341f4c89c20c51122e473353abc207a45b427 and rf_4bac0989.raw sha256 dd9eaaedfbbef9965db38515d50a69ab4b61e7995d4cfd6424ebf1edc2c6791f), with Art. 7 cross-read on the Archivo General de la Nacion page (rf_73457293.raw): Decreto Art. 12 (compiled as DUR 1074 de 2015 Art. 2.2.2.25.2.9) lets the representante legal authorize processing of a nino, nina o adolescente's data after the minor is heard, where it serves their interes superior; C-748 section 2.9.3.4, adopted by the Segundo of its RESUELVE, reads Art. 7's proscription that way and speaks of los menores de 18 anos. Admitted as CO Ley-1581-2012-Art7-C-748-2011-with-Decreto-1377-2013-Art12 SOURCED consent below 18 by parental_consent from 2013-06-27, replacing the UNSOURCED row (its record carried in the note). Gate: three CO teeth added (const JG_CO_MINORITY), RED 171/174 on the pre-CO table (job 1790624403, exactly the three: how 3 vs 1, consent 21 vs 18, method 2 vs 1), GREEN 174/174 on the new table (job 1790624499); content ruler lost_from_live=0 gained 3 ONE-WAY-GAIN (job 1790624549); PROMOTED expect_sha256 92c7364013f2cedc6fc2d651f1701ff84a69d3df8c20135af3473979f1f9e299 with no capability-loss flag (job 1790624630; b76135e5 banked at knowledge/status/nx_connect_juris_gate.elf.bank-b76135e5 and the pre-CO source at knowledge/status/nx_connect_juris_gate.nx.bank-lawscont2-preCO), live re-hashed 92c73640 131840 B, _offc twin installed (job 1790624661), nx_job_run of the promoted binary 174/174 GREEN (/tmp/lawscont2_gate_co_promoted.out 21345 B); /api/gate_run FAST path still answers exit 141 verdict RED with capture_truncated=1 at 16384 B (debt 1790615554, the transport cap, not the gate). Table 83423 B to 87044 B (3900a745110770fa7ee0bc7b22a6474b39e3cdb51e77c8e3c32e7c29bc08f152, banked knowledge/status/connect_jurisdictions.conf.bank-lawscont2-3900a745); partition rows 45 = admitted 34 + unsourced 11 + refused 0, admitted 34 = pending 3 + out-of-scope 0 + silent 5 + in-force line rows 26; strictest line unchanged: no minimum account age, consent below 21, method rank 2, barred below 16, and 21 on 2027-05-13. KNOCK-ON for consumers (the table is data, so it applies at the next read): a Colombian declarant leaves the strictest line for consent below 18 by parental_consent, so a Colombian minor of 13 to 15 becomes admissible with the representante legal's authorization where the strictest line barred them, and an 18- to 20-year-old needs none; the best-interest duty and the minor's right to be heard are content rungs the table does not carry. Ref candidates co-decreto1377 and co-ley1581-c748 appended (candidates file 6328 B). |
| 2026-09-28 | YS1 | lesson | A proscription is not yet a line: Ley 1581 Art. 7 read alone (queda proscrito el tratamiento de datos de ninos, ninas y adolescentes) would have drawn barred-below-18 for Colombia, and through the strictest fold it would have barred every minor in every undeclared or tainted place; the Constitutional Court's C-748 conditioning and the regulating decree turn it into an authorization line. Read the constitutional review and the regulation before admitting any prohibition sentence as a barred band. Second lesson: a government host whose root page a search engine indexes under a gambling title (normativa.archivogeneral.gov.co, 2026-09-28) may be serving injected pages; the law page cited was checked for injected content (none) and cross-read against a second official compilation, and the row's mirror is the second host. |
| 2026-09-28 | YS1 | measure | W16 LAWS-CONTINUED second run, US-UT 13-71 litigation from the court's own published record: GovInfo's MODS for the case package (govinfo.gov/metadata/pkg/USCOURTS-utd-2_23-cv-00911/mods.xml, knowledge/fetched/rf_914e3359.raw sha256 2c233e173fb641003d6637d1e72a263fc1eee79c1f826252c455c3cfde775677, publisher the Administrative Office of the United States Courts, record created and last changed 2024-09-11) lists exactly two published opinions in NetChoice LLC v. Reyes et al, both by Judge Robert J. Shelby: 2024-07-22 granting the motion to dismiss Count VI of the first amended complaint, and 2024-09-10 granting NetChoice's motion for a preliminary injunction (docket 52). What the injunction restrains and for whom, any later district order and the Tenth Circuit appeal remain UNREAD (the opinion PDF reads font-less; an unchanged 2024 package proves only that no further opinion was published into it). Landed as a note on the UT 13-71 duty row, which stays four-dash, so no line moves. Also landed as notes: FR Loi 2023-566 (Legifrance failed t12-ske-signature rc=-405 four times) and PL (uodo.gov.pl failed t12-cert-pipeline rc=-210 four times on two pages). Final table 88644 B sha256 0bc194d33eadfcbb797383d13f1ed2a39d52915bd8c0139cdfbccb5032abb90f (banked knowledge/status/connect_jurisdictions.conf.bank-lawscont2-0bc194d3); live gate 92c73640 re-run by nx_job_run 174/174 GREEN (/tmp/lawscont2_gate_final2.out); partition rows 45 = admitted 34 + unsourced 11 + refused 0; strictest line no minimum account age, consent below 21, method rank 2, barred below 16. |
| 2026-09-28 | YS1 | queue | W16 LAWS-CONTINUED second run, OPEN at return. Eleven UNSOURCED rows keep their places on the strictest line, each with its blocker in its note: EC (LOPDP: the Registro Oficial text and the scope of the 15-year sentence under Art. 21's automated-decision heading; the Nishi index holds no official copy), FR (Loi 2023-566, Legifrance TLS -405), AR (CCyC Art. 26 is a maturity test, not an age), BO (a data-protection statute and the Codigo Nina, Nino y Adolescente, Ley 548; the civil row is now SOURCED), HN (data-protection law), VE (LOPNNA and habeas data), DO (Ley 136-03 and the Codigo Civil in force, Decreto Ley 2213 of 1884; the Senate text of a new code is a bill), SV (Decreto 144, asamblea.gob.sv TLS -212), NG (NDPA 2023, official hosts 403 and 404), GH (Act 843, fonts unmappable by nx_pdf_text), PL (lossy PDF readers, api.sejm.gov.pl TLS 1.3 BAD_FORMAT, uodo.gov.pl -210). Unread and named: PH Civil Code Art. 1327 (Official Gazette 403, Senate LDR 404 for RA 386), the text of DUR 1074 Art. 2.2.2.25.2.9 and Bolivia's Ley 2089 itself, the UT 13-71 injunction terms and appeal. Owed to the gate owner: a BO neg-control tooth (a regression guard against a later deletion of the BO UNSOURCED row). Owed to the fetcher owner (the TLS debt the table notes name, 1790461725): t12-ske-signature -405 (legifrance.gouv.fr), t12-cert-pipeline -210 (uodo.gov.pl) and -212 (colaboracion.dnp.gov.co); the ICBF compilation URLs now redirect to the portal. Owed to the refs owner: knowledge/status/youthsafety_refs_candidates_lawscont2_20260928.txt (6328 B, eight rows ph-ra6809, gt-codigo-civil, ve-codigo-civil, do-ley172-13, hn-codigo-familia, bo-codigo-civil, co-decreto1377, co-ley1581-c748; each needs an inline [key] mark in the same edit). Owed to the law-engine owner (standing order 2026-09-28, one law engine): this table is one of the five rulebooks to consolidate. Tools: the harness WebSearch hit the account's monthly spend limit mid-leg, and nx_websearch takes the query first and the scope second (web, site or trusted); nx_catalog reads it PROMOTED-SOURCELESS, so its grammar is discoverable only by probing. /api/gate_run FAST path still exit 141 at the 16384 B capture cap (debt 1790615554); nx_job_run is the reliable run. |
| 2026-09-28 | YS1 | queue | W16 LAWS-CONTINUED second run, BUILT AND DELIBERATELY NOT PROMOTED (declared so it is not mistaken for a forgotten build): the BO neg-control tooth (neg-control-production-a-Bolivian-declarant-whose-data-protection-row-is-UNSOURCED-gets-the-strictest-line-beside-its-SOURCED-civil-row) plus a header line landed in buildroot/runtime/_hdl_build/nx_connect_juris_gate.nx (40061 B to 40461 B, pre-CO source banked at knowledge/status/nx_connect_juris_gate.nx.bank-lawscont2-preCO), and the qualify build (job 1790625204) reads 175/175 GREEN on the live table as _build/nx_connect_juris_gate.sov.elf 91f9867493cc47c384904dddbd0ac4810efb20e18e03b3924d1718dd44d2bb49 (134576 B). The content ruler against the served 92c73640 is lost_from_live=0 but gained 54 runs (job 1790625228), 51 of them sign-up door messages (Your account was created., the door-challenge refusals) from buildroot/runtime/_hdl_build/nx_connect_juris_gate's closure member nx_connect_signup.nx, changed by the wave-16 sign-up lane after this seat's CO build at job 1790624403 (nx_absent: the phrase sits at nx_connect_signup.nx line 723, corpus_complete=1). This seat did not build or review that change, so it did not ship it inside its gate; the served gate stays 92c73640 (174/174 with the three CO teeth) and the next ship of this gate by its owner, after the sign-up lane ships its own lib, carries the BO tooth. The BO tooth is a regression guard: it is GREEN on both the old and the new table (a Bolivian declarant read UNSOURCED before the civil row and still does), so it proves the guard, not the row. |
| 2026-09-28 | YS1 | retract | Correction to row 1790625300: its count of 51 sign-up messages was not measured. The ruler (job 1790625228) reports gained_by_candidate=54 run occurrences (deduped=0) with 33 distinct entries in its GAINED display class; one of those is the BO tooth name, and every other one shown is sign-up door text, so all but one gained run come from the closure's nx_connect_signup.nx change. The decision in that row (withhold the promote, declare the build) is unchanged. |
| 2026-09-28 | YS1 | queue | INTAKE 1790633100 routed by nx_intake_route (law-core-seat, epoch 1790633062) from operator: for the law domain are we making sure that these things are tightly coupled but that we can use them for import export etc so that we can have our compliance and ethics and legal and all that nailed d -- sponsor intake-1790633100 plus2 |
| 2026-09-28 | YS1 | queue | W18 LAW-CORE: the one law engine (legal LG4: nx_law_core law_ask over knowledge/law/, gate nx_law_core_gate 86/86, CLI nx_law on MCP) generalises this table's grammar, and topic minors-online is catalogued with YS1's four fields and method ranks. The exact migration recipe (translation once at load, LAW_HOW mapped to JUR_HOW, the method rank preserved, every nx_connect_juris_gate tooth unchanged before any consumer rebuild, the table retired through the lifecycle only after) is legal.plan row 1790633700. Not executed this leg; owner YS1, engine owner law-core (legal A). |
| 2026-09-28 | YS1 | land | YS1'S TABLE NOW DECIDES REAL SIGN-UPS ON THE CONNECT ALPHA (W16 ALPHA-SIGNUP-DOOR, connect.plan rows 1790635100 and 1790636600): the private sign-up door on both register paths of https://nishifamily.com/alpha/connect/ (build bdeb97bc, pid 20441, digest_match 1) runs csu_signup_check_web, whose FIRST, pure step is csu_juris_admit over jur_rules_for and jur_account_decision on knowledge/connect_jurisdictions.conf, before any budget is charged or any challenge spent; production /connect never enters it (staged 0). LIVE over the edge, promoted nx_connect_alpha_signup_gate 23/23 and nx_connect_alpha_device_gate 42/42: D1 a minor declaring no country is refused country_required with no account and no cookie; D7 an AU declarant of 13 to 15 is refused jurisdiction_barred; D8 a US declarant under 13 is refused parental_consent_required by name; neg-control D9 an AU declarant of 16 clears and D10 that account's page shows the under-18 lanes of the two-deep wall with every consent purpose OFF; DD3 on the device path refuses country_required with 403 at respond before any OPRF answer; in a real browser the CM13 journey w16signup_minor stayed on /register reading Under 18, sign-up needs the country or region you live in. OPEN: guardian consent at sign-up is not wired (fam_guardian_consent needs an existing linked member, so PARENTAL_CONSENT refuses rather than holds an account for a guardian); the age band is self-declared (CSU_ATT_SELF), no attested claim source yet; UNDER_MIN is not exercised live. For the LAW-CORE migration (legal.plan row 1790633700) the door is one more consumer of jur_rules_for and jur_account_decision, so it needs a rebuild after the translation, not an edit. |
| 2026-10-01 | BOARD | measure | BARFRESH 2026-10-01 (seat residue-fleet, T0 1790856940): before STALE with 5 of 5 bars UNATTESTED on the October clock; after 2 ATTESTED and 3 UNATTESTED, verdict still STALE. Attested from page bytes re-fetched and read this month: SB-YS-APPS (Roblox Newsroom, seven cards under the 2026/09 url path and none under 2026/10; the month is read from the card url because the page prints no day-level date on a news card) and SB-YS-LAW (the European Commission library page still reads Publication 14 July 2025). Left for the arXiv attest runner and NOT fetched by this seat: SB-YS-AGE (arxiv-age), SB-YS-E2EE (arxiv-franking) and SB-YS-GROOM (arxiv-grooming). The page needs a regen to show the October barscans. |
On these two registers. Rows are declared in the domain's plan file and carry the debt id, which is the join key back to the sovereign debt plane — that plane, not this page, is the authority on state. Reconciling them automatically (the regen reading the plane and refreshing these rows) is a named, owed rung; until it lands, treat an id here as a pointer to look up, not a status to trust.
Honest verdict. The coverage above records source-symbol presence. Stronger comparisons are authored claims, not measured runtime superiority or accepted outcomes. A watch contract names an expected source symbol; finding it changes source discovery only. Qualification, deployment and runtime acceptance require their own evidence.
Person · product · place — not yet measured for this domain
Every compare carries this layer. Declare
knowledge/compare/youthsafety.ppp (rows surface|nishi or c1..c4|label|url|connect naming OUR live surface and each rival's front door), run nx_ppp_probe domain youthsafety, and this section fills itself on the next beat: the same ruler on both sides — privacy and CX (third-party hosts, tracker classes, cookies, security headers), design and longevity (design hygiene, computed WCAG contrast, render-blocking resources, unsized media, script weight, theme and motion queries), findability (landmarks, skip link, on-site search, breadcrumb, headings, internal links).Exclusive and shared capabilities
One capability is graded on one board; every other board references it. The fleet duplicate census (nx_rivalcensus dupes, on the fleetdupes clock row) reads every board's matrix and names each capability graded as a row on two or more boards, with a home derived from evidence: rung when exactly one board's plan contracts the symbol (that board is starred), gates when no plan contracts it and exactly one board's executed gate map runs the organ's gate (that board is plussed), ambiguous when several boards carry the deciding evidence (a decision for their seats), and none when no evidence decides it, with the reason beside it: unmapped (no board of the duplicate declares a gates map; declare the maps) or unproven (a map exists and runs none of the organ's gates; gate the organ on its proving board, or declare it a shared library by policy). A home elsewhere means this board should carry an @xrow reference to the home board's row rather than a graded row of its own; a home here means the other boards should. The table is this board's slice of one estate-wide census: the shape is shared, the rows are the board's.
This board grades 19 capabilities: 6 exclusive to it and 13 shared with other boards. Shared rows on this page: 13 = home here 1 + home elsewhere 6 + ambiguous 0 + undecided 6 + refused 0 (partition 13); undecided = unmapped 0 + unproven 6 + unevidenced 0; homonyms 0; since the previous census: new 0, resolved 0. Census FRESH age_s=7258.
| Capability | Organ | Boards grading it | Home | Rule | Evidence | Standing on this board |
|---|---|---|---|---|---|---|
| ln_min | nx_connect_lanes_lib.nx | connect, faithsocial, youthsafety | — | none | unproven | undecided |
| hmix | nx_connect_idage.nx | connect+, faithsocial, youthsafety | connect | gates | gates | home elsewhere adopt: @xrow connect|hmix|home by gates (fleet duplicate census) |
| yw_may_channel | nx_connect_youth_lib.nx | connect, faithsocial, youthsafety | — | none | unproven | undecided |
| sink_fails | nx_connect_csae_report_lib.nx | connect, youthsafety | — | none | unproven | undecided |
| ty_active | nx_connect_presence.nx | connect+, youthsafety | connect | gates | gates | home elsewhere adopt: @xrow connect|ty_active|home by gates (fleet duplicate census) |
| abuse_score | nx_connect_blind_abuse_lib.nx | connect, faithsocial, youthsafety | — | none | unproven | undecided |
| grp_can_post | nx_connect_group_lib.nx | connect, faithsocial, youthsafety | — | none | unproven | undecided |
| room_admit | nx_connect_lds_room_lib.nx | connect, faithsocial, youthsafety | — | none | unproven | undecided |
| ce_emit_html | nx_connect_e2e_client.nx | connect+, faithsocial, youthsafety | connect | gates | gates | home elsewhere adopt: @xrow connect|ce_emit_html|home by gates (fleet duplicate census) |
| csu_signup_admit | nx_connect_signup.nx | connect*+, faithsocial, youthsafety+ | connect | rung | plan | home elsewhere adopt: @xrow connect|csu_signup_admit|home by rung (fleet duplicate census) |
| ccl_circle_reach | nx_connect_circles.nx | connect*+, faithsocial, youthsafety+ | connect | rung | plan | home elsewhere adopt: @xrow connect|ccl_circle_reach|home by rung (fleet duplicate census) |
| cvh_person_attest | nx_connect_personhood.nx | connect*+, faithsocial, youthsafety | connect | rung | plan | home elsewhere adopt: @xrow connect|cvh_person_attest|home by rung (fleet duplicate census) |
| jur_rules_for | nx_connect_juris.nx | youthsafety*+, tradecompliance | youthsafety | rung | plan | home here |
Gaps from the record — what the estate does that no board carries
The record census (nx_goalmap record) reads the invoked-tool population and every plan queue row and files each organ or directive that NO matrix, plan or gates row names. A row here is a callout the boards missed: adjudicate it onto a board or declare it infrastructure. Census state STALE (age 1396363 s), sources read 4 of 7 declared — a BLIND census is a FLOOR: unread sources can only add rows.
| kind | name | board | source | evidence |
|---|
rows shown 0|this board's directives 0|estate-wide un-boarded organs 452 (listed in full on /compare/ecosystem)|census rows 639|malformed 0 (counted, never rendered)
References
Beyond a link list. Every reference below resolves twice — the publisher's copy and, where banked, the estate's own non-rottable library mirror with a content pin — and carries its evidence class plus the exact claim on this page it grounds. Keyed marks like [key] in the matrix notes jump here. A dash means honestly absent, never assumed.
- [instagram-teen] Meta Newsroom. Introducing Instagram Teen Accounts (published 17 September 2024, updated 22 October 2025) -- teens under 16 private by default, the strictest messaging settings so a teen can only be messaged by people they follow or are already connected to, parents see who their teen messaged in the past seven days but cannot read the messages, teens under 16 need a parent's permission to make any built-in protection less strict, Teen Accounts rolled out to every country where Instagram is available (11 June 2025), and suspected teens placed in Teen Account settings regardless of the listed birthday. publisher · read in our library
knowledge/fetched/cmp_youthsafety_instagram_teen.html· pinh8575aaf3d1eee81f9ffcbf1f1f0228c724718865721ea2717915c307ecee85cb· accessed 2026-09-25 · vendor-docGrounds: The InstagramTeen column; the legal-lines, adult-minor, peer-contact, anti-stalking, guardian, personhood, lane and no-tracking rows. - [discord-teen] Discord press release. Discord launches teen-by-default settings globally -- only users age-assured as adults reach age-gated spaces, unblur sensitive content or speak on stage; messages from people a user may not know go to a separate inbox; friend-request alerts for unknown users. publisher · read in our library
knowledge/fetched/cmp_faithsocial_discord_teen.html· pinh8940bf82103fe206a50dd032e38b39064534b9973b7ea3c29fdfcd487de7f2f2· accessed 2026-09-25 · vendor-docGrounds: The Discord column; the legal-lines, adult-minor, peer-contact, personhood, lane and sensitive-image rows. - [discord-family] Discord Family Center -- a teen may connect a parent or guardian, who then sees only recently added friends, servers joined or participated in, and users messaged or called, never the content of messages. publisher · read in our library
knowledge/fetched/cmp_faithsocial_discord_family_center.html· pinhf542a4f49a31d4cfcc7a2f2c6a96ee052ebc8dded376bce94df633ddbf00c35c· accessed 2026-09-25 · vendor-docGrounds: The Discord column on the guardian row and the circles row. - [roblox-news] Roblox Newsroom, listing read 2026-09-25 -- Roblox requires age checks and limits minor and adult chat (November 2025), a safety snapshot on age checks for chat (December 2025), age checks required to chat (January 2026), how the Roblox age assurance system keeps age checks current beyond the selfie (August 2026), Roblox brings open-source safety models to the ROOST model community (August 2026); newest items dated September 2026, among them a parent guide to back-to-school screen-time discussions. publisher · read in our library
knowledge/fetched/cmp_youthsafety_roblox_about_newsroom.html· pinh7edd966a1c6fd7f77383abdc82e01f2dbb61556b11864534a331c2ae35ed2c50· accessed 2026-09-25 · mirrored-indexGrounds: The Roblox column; the best-in-class bar SB-YS-APPS and its barscan; the adult-minor, peer-contact, personhood, lane and content-blind rows. - [snap-parents] Snapchat Parents site -- Family Center for parents and caregivers; Snap Map location-sharing is off by default, and a Snapchatter who turns it on can share location only with people they are already friends with, with no option to ever share location with someone who is not a friend. publisher · read in our library
knowledge/fetched/cmp_youthsafety_snap_parents.html· pinh82cf441940ba6ef6cd7a7ab46765c174c3664c5673dad169af24d2a01b090789· accessed 2026-09-25 · vendor-docGrounds: The Snapchat column; the anti-stalking, location and guardian rows. - [yubo] Yubo home page -- How Yubo Pioneered 100% Age Verification to Set a New Standard for Trust and Safety on Social Media (first published 12 December 2024, last updated 10 November 2025), with a face verification feature. publisher · read in our library
knowledge/fetched/cmp_youthsafety_yubo_home.html· pinh39d44f39bb58f9150f13ff0b121827705c332a14a980a474ff57707778d8482d· accessed 2026-09-25 · vendor-docGrounds: The Yubo column; the personhood row. - [messengerkids] Messenger Kids home page -- parents manage the child's experience on a Parent Dashboard, choosing which features the child can use and controlling the contact list, can remove contacts at any time and can download all the child's contacts, messages, images and videos; the app collects the child's name, shared content, contacts and activity. publisher · read in our library
knowledge/fetched/cmp_youthsafety_messengerkids.html· pinh80ecee9c6c16c88221a794caa91a99f62a4dc046d9d0962cf0417452f12eb760· accessed 2026-09-25 · vendor-docGrounds: The MessengerKids column; the adult-minor, peer-contact, guardian, sign-up, lane, circles, bullying and no-tracking rows. - [eu-art28] European Commission. Commission publishes guidelines on the protection of minors under the Digital Services Act (publication 14 July 2025) -- recommendations for all online platforms accessible to minors except micro and small enterprises, including setting minors' accounts to private by default so their personal information and content is hidden from those they are not connected with, reducing the risk of unsolicited contact by strangers. publisher · read in our library
knowledge/fetched/cmp_youthsafety_eu_art28.html· pinh37e1862e363cf4155cb593aacb197c276d1a997f87f0f2f949beb0171fc8cc51· accessed 2026-09-25 · published-standardGrounds: The EU line of the legal-lines row; the legal bar SB-YS-LAW and its barscan. - [ftc-coppa] US Federal Trade Commission. Children's Online Privacy Protection Rule (COPPA), rule page -- verifiable parental consent before collecting personal information from children under 13. publisher · read in our library
knowledge/fetched/cmp_youthsafety_ftc_coppa.html· pinh73e0bec49f904f347fbc8132933f92a183753c4b2b7edd41325a7c2ce2a1d67e· accessed 2026-09-25 · published-standardGrounds: The US line of the legal-lines row and the guardian-consent row. - [church-gh20] General Handbook 20.7.1 Adult Supervision, The Church of Jesus Christ of Latter-day Saints -- at least two adults must be present at all Church activities attended by children and youth. publisher · read in our library
knowledge/fetched/cmp_faithsocial_church_gh20.html· pinhbf02b62a6cb22da915ef4031bb75b7e14e1cbeb3badefd9b1ae9bd611eb6a897· accessed 2026-09-25 · published-standardGrounds: The two-deep rows: no private adult-minor channel, and two or more visible adults in any room holding a minor. - [arxiv-age] arXiv listing, age assurance sorted by submission date -- newest 2026-09-11: Reconceptualizing Age Assurance as a Sociotechnical Problem (2609.13598); August: dorsal hand images for XR and privacy-preserving age assurance and child safety (2608.21009); March: assessing age assurance technologies, effectiveness, side-effects and acceptance (2603.25695). publisher · read in our library
knowledge/fetched/cmp_faithsocial_arxiv_ageassurance.xml· pinh1f6500a960480377e747b7b73ecb057f56c92238601ebbcddb8d5501f46b8268· accessed 2026-09-25 · mirrored-indexGrounds: The frontier bar SB-YS-AGE and its barscan; the personhood and age-band rows. - [arxiv-franking] arXiv listing, message franking sorted by submission date -- 2 results: Transcript Franking for Encrypted Messaging (2507.19391, July 2025, Thomas Ristenpart among the authors) and SoK: Content Moderation Schemes in End-to-End Encrypted Systems (2208.11147, v6 January 2025). publisher · read in our library
knowledge/fetched/cmp_youthsafety_arxiv_franking.xml· pinh8611feb401b72e6846ef4471f2ed774067c905d124d5ff4e652a5c92f0d27fe9· accessed 2026-09-25 · mirrored-indexGrounds: The frontier bar SB-YS-E2EE and its barscan; the message-franking row. - [arxiv-grooming] arXiv listing, online grooming sorted by submission date -- 7 entries, newest submitted 2025-03-09 (a NAACL 2025 main-conference paper), then 2025-02-28 and 2025-01-21 (AAAI Social Impact track), none in 2026. publisher · read in our library
knowledge/fetched/cmp_youthsafety_arxiv_grooming.xml· pinh090ceb8fcfb62f7c00467dba24172da8087cea499be8e8386a156857ccd693d1· accessed 2026-09-25 · mirrored-indexGrounds: The bar SB-YS-GROOM and its barscan; the content-blind abuse row.
generated by nx_swcompare_matrix (sovereign NishiLang organ) from knowledge/compare/youthsafety.matrix · source checks show implementation presence; runtime and user-outcome evidence are reported separately · JavaScript supports page controls