profile.json

{
  "decision_card_profile_version": "0.3",
  "profile_id": "citizen-data-vault-contract-v0.1",
  "title": "Citizen Data Vault Contract Profile (GovTech)",
  "purpose": "Profile of the AI Procurement Decision Card v0.3 vault-contract surface, scoped to federal / state / local government subject-of-decision data. Names what tokenized / redacted / pseudonymized / cleartext access an AI tool may have to which government-data category, under which Privacy Act / FOIA / consent basis, with what retention envelope, classification level, and aligned to OMB M-24-10 + Privacy Act 1974 + FOIA + Section 508 + FedRAMP + classified-data segregation (E.O. 13526 + 32 CFR Part 2002 CUI) + state public-records-law overlay expectations.",
  "scope_clarification": "The repo name 'citizen-data' is approximate; the profile covers ALL subjects of federal / state / local government action including US citizens, lawful permanent residents, immigrants, foreign nationals, and corporate entities interacting with federal services. The profile fields use neutral terms (subject, applicant, record) throughout.",
  "applies_to": [
    "federal-executive-agency",
    "federal-independent-agency",
    "federal-contractor-providing-ai-to-government",
    "state-executive-agency",
    "local-government-agency",
    "ai-vendor-to-government"
  ],
  "data_category_taxonomy": [
    {"code": "subject-identity-core",              "description": "Name, SSN, ITIN, EIN, alien-number, DOB, contact info, address",                                                  "default_protection_level": "tokenized-or-pseudonymized"},
    {"code": "benefit-application-data",            "description": "Benefit application form fields (household, income, assets, dependents, disability)",                            "default_protection_level": "tokenized"},
    {"code": "tax-account-data",                    "description": "IRS / state-tax account record (return data, payment history, examination history)",                              "default_protection_level": "tokenized-with-summary-stats-cleartext"},
    {"code": "veterans-benefits-record",            "description": "VA benefits record (service-connected disability, healthcare enrollment, education benefits)",                   "default_protection_level": "tokenized"},
    {"code": "immigration-status-record",           "description": "USCIS / ICE / CBP immigration record",                                                                            "default_protection_level": "tokenized-and-not-as-model-input-by-default", "notes": "Default: NOT a model input. Specific use cases (e.g. naturalization eligibility AI) require explicit decision-card-level approval"},
    {"code": "law-enforcement-record",              "description": "Criminal history, investigation record, arrest record",                                                            "default_protection_level": "tokenized-and-not-as-model-input-by-default", "notes": "Default: NOT a model input. Specific law-enforcement-triage use cases require explicit decision-card-level approval + statutory authority"},
    {"code": "federal-contract-proposal-content",   "description": "Proposal narrative, past-performance, pricing for federal contracting",                                            "default_protection_level": "tokenized-with-summary-stats-cleartext"},
    {"code": "foia-request-content",                "description": "FOIA request body + identity of requester",                                                                       "default_protection_level": "pseudonymized"},
    {"code": "foia-responsive-record",              "description": "Responsive record being processed for release",                                                                   "default_protection_level": "tokenized-with-foia-exemption-tagging"},
    {"code": "classified-data",                     "description": "Data classified UNCLASSIFIED / CUI / CONFIDENTIAL / SECRET / TOP-SECRET per E.O. 13526",                          "default_protection_level": "clearance-gated", "notes": "Access REQUIRES agent_clearance_level meeting or exceeding the data classification level"},
    {"code": "controlled-unclassified-information","description": "CUI categories per 32 CFR Part 2002",                                                                              "default_protection_level": "clearance-gated"},
    {"code": "agency-personnel-record",             "description": "Federal / state agency personnel record (SF-50 + performance evals + clearances)",                                "default_protection_level": "tokenized"},
    {"code": "protected-class-self-id-data",        "description": "Race, ethnicity, sex, disability, veteran status (federal-form self-ID per OFCCP CC-305 + agency-EEO forms)",      "default_protection_level": "tokenized-and-not-as-model-input-by-default", "notes": "Default: NOT a model input. Federal EEO regulations require segregation from selection / decision process. Used only for downstream bias-coverage measurement + EEO-1 reporting."},
    {"code": "ada-accommodation-record",            "description": "ADA Title II accommodation request + medical documentation",                                                       "default_protection_level": "tokenized-and-not-as-model-input-by-default", "notes": "Confidential medical record under ADA. NEVER a model input."},
    {"code": "limited-english-proficiency-data",   "description": "Subject's preferred language + English proficiency assessment",                                                    "default_protection_level": "tokenized-with-language-code-cleartext", "notes": "Language code cleartext for Title VI LEP routing; full assessment tokenized"}
  ],
  "consent_basis_taxonomy": [
    {"code": "benefit-application-signed-paw-205",              "description": "Standard SSA / VA / IRS benefit-application signature (privacy-act-warning notice)"},
    {"code": "federal-contractor-flow-down-far-clause",          "description": "FAR-clause-required AI use disclosure flow-down to vendor"},
    {"code": "foia-request-submitted",                           "description": "FOIA request submission itself"},
    {"code": "privacy-act-routine-use-published-in-sorn",         "description": "Privacy Act 5 USC §552a(b) routine use published in agency System of Records Notice"},
    {"code": "agency-personnel-employment-agreement",             "description": "Federal / state agency employment agreement"},
    {"code": "ada-accommodation-confidentiality-agreement",       "description": "ADA Title II confidentiality agreement"},
    {"code": "statutory-authority-named",                         "description": "Specific statutory authority cited in vault contract"},
    {"code": "judicial-order-or-subpoena",                        "description": "Compelled disclosure"}
  ],
  "protection_level_definitions": {
    "cleartext":                                "Raw value reaches the AI tool as-is",
    "clearance-gated":                          "Access REQUIRES agent_clearance_level meeting or exceeding the data classification level; otherwise blocked",
    "tokenized":                                "Stable token replaces raw value",
    "tokenized-with-band-cleartext":            "Tokenized + coarse band reaches model",
    "tokenized-with-summary-stats-cleartext":   "Tokenized + summary stats reach model",
    "tokenized-with-foia-exemption-tagging":    "Tokenized + per-segment FOIA exemption tag (b(1) through b(9)) reaches model for exemption-recommendation purposes only",
    "tokenized-with-language-code-cleartext":   "Tokenized + ISO language code cleartext (for Title VI LEP routing)",
    "pseudonymized":                            "Synthetic identifiers",
    "tokenized-or-pseudonymized":               "Agency chooses, documented in specific Decision Card",
    "tokenized-and-not-as-model-input-by-default": "Tokenized for storage; default policy = NOT made available as a model input"
  },
  "retention_envelope_required_fields": [
    "max_retention_window",
    "deletion_trigger",
    "freedom-of-information-act-readiness",
    "privacy-act-system-of-records-notice-uri",
    "national-archives-records-administration-schedule",
    "classification-declassification-schedule",
    "litigation-hold-trumps-deletion-trigger"
  ],
  "vendor_due_diligence_required_artifacts": [
    "vendor-soc2-type2",
    "vendor-fedramp-authorization-package",
    "vendor-contract-with-audit-rights",
    "vendor-section-508-conformance-attestation",
    "vendor-data-residency-attestation-us-only",
    "vendor-subprocessor-list-with-30-day-prior-notice",
    "vendor-clearance-level-attestation",
    "vendor-omb-m24-10-rights-or-safety-impacting-classification-attestation"
  ],
  "ai_use_case_inventory_block_required": true,
  "audit_stream_emission_conventions": {
    "decision_card_published_event_kind": "citizen_data_vault.decision_card_published",
    "vault_contract_amended_event_kind":  "citizen_data_vault.vault_contract_amended"
  },
  "signature": {
    "required": true,
    "algorithm": "ed25519"
  }
}