implement child identity firewall boundary #56

Merged

lost-rob0t merged 12 commits from agent/implement-child-identity-firewall into main

2026-07-28 23:35:24 +00:00

lost-rob0t commented

2026-07-28 23:22:08 +00:00

(Migrated from github.com)

What changed

implements a deterministic, network-free Child Identity Firewall
removes child names and structured identifiers from child records
replaces child identities with case-local pseudonyms and age bands
rejects child-name query fields and known child identifiers in queries
blocks named minor targets
removes names from targets whose adult status is unresolved
enforces the approved adult legal-status threshold
rejects cross-case child identifiers
independently scans exports after sanitization
ensures violation reports never echo prohibited values
adds synthetic-only unit tests and a dedicated CI workflow
records the implementation in Org-roam and updates the child-abuse project index

Non-execution boundary

This PR adds no AutoDig integration, crawler, live search, court/archive adapter, real-case ingestion, public-record request sender, or canonical case writer. The implementation processes only caller-supplied structured input.

Validation

Python compile check
synthetic privacy unit tests
explicit check for zero network and AutoDig dependencies
existing Org-roam Pages and Kindle EPUB workflows

Privacy target

Zero child-name queries, zero named child records, zero stable cross-case child identifiers, and fail-closed handling for unknown age.

## What changed - implements a deterministic, network-free Child Identity Firewall - removes child names and structured identifiers from child records - replaces child identities with case-local pseudonyms and age bands - rejects child-name query fields and known child identifiers in queries - blocks named minor targets - removes names from targets whose adult status is unresolved - enforces the approved adult legal-status threshold - rejects cross-case child identifiers - independently scans exports after sanitization - ensures violation reports never echo prohibited values - adds synthetic-only unit tests and a dedicated CI workflow - records the implementation in Org-roam and updates the child-abuse project index ## Non-execution boundary This PR adds no AutoDig integration, crawler, live search, court/archive adapter, real-case ingestion, public-record request sender, or canonical case writer. The implementation processes only caller-supplied structured input. ## Validation - Python compile check - synthetic privacy unit tests - explicit check for zero network and AutoDig dependencies - existing Org-roam Pages and Kindle EPUB workflows ## Privacy target Zero child-name queries, zero named child records, zero stable cross-case child identifiers, and fail-closed handling for unknown age.