Passport M4

Passport processing notice draft

Minimum closed-beta notice. Legal and security review must expand this before public release.

Back to passport

Stored fields

Account identifier, guardian check state, method, and event reference
Pet passport profile, guardian-confirmed record cards, share-token hashes and state
Consent type, notice version, grant or withdrawal state, passport events, and export manifest
Server wallet mock credential references and export timestamps

Not stored

Original guardian check material, address, raw contact channel, and raw national identifier
Raw public-registry numbers, original hospital documents, or raw values for anchors
Raw share tokens, external provider API keys, or real-user test datasets

AI, photos, and dialogue

AI only assists drafts and nothing is applied to the passport before guardian confirmation.
Photo-based fields remain visible observations until the guardian confirms them.
When overseas processors are used, transfer notice and separate consent records stay versioned.

Push and export

Push reminders run only after opt-in and stay blocked during quiet hours.
Export returns passport, record cards, share state, consent state, and wallet VC bundles together.
The database stores only the export manifest and expiry timestamp, not the bundle body.