{
  "$schema": "https://finance.entelekron.org/schemas/data-governance-control-profile.schema.json",
  "schemaVersion": "1.0.0",
  "controlPlaneId": "tvk-group:entelekron-financial-infrastructure",
  "canonicalAssetId": "tvk-group:tvkusd",
  "profileId": "tvkusd-data-governance-prelaunch-v1",
  "status": "prelaunch-no-production-data",
  "asOf": "2026-08-14T00:00:00Z",
  "productionDataStoreCount": 0,
  "approvedDataProcessors": [],
  "approvedCrossBorderTransfers": [],
  "retentionSchedules": [],
  "classifications": [
    {
      "classificationId": "public",
      "publicDisclosurePermitted": true,
      "logsPermitted": true,
      "examples": ["approved-public-status", "public-control-profile", "public-schema", "public-evidence-digest"],
      "prohibitedContent": ["private-key-material", "authentication-secret", "bank-account-number", "unmasked-personal-data"]
    },
    {
      "classificationId": "internal",
      "publicDisclosurePermitted": false,
      "logsPermitted": true,
      "examples": ["non-sensitive-runbook", "internal-service-map", "test-result-summary"],
      "prohibitedContent": ["private-key-material", "authentication-secret", "bank-account-number", "unmasked-personal-data"]
    },
    {
      "classificationId": "confidential",
      "publicDisclosurePermitted": false,
      "logsPermitted": false,
      "examples": ["provider-due-diligence", "commercial-terms", "masked-customer-case"],
      "prohibitedContent": ["raw-private-key", "seed-phrase", "unmasked-authentication-secret"]
    },
    {
      "classificationId": "restricted",
      "publicDisclosurePermitted": false,
      "logsPermitted": false,
      "examples": ["private-key-material", "recovery-share", "authentication-secret", "bank-account-number", "unmasked-personal-data"],
      "prohibitedContent": ["public-repository", "application-log", "analytics-event", "support-transcript-without-approved-redaction"]
    }
  ],
  "handlingRequirements": {
    "dataMinimizationRequired": true,
    "purposeAndLegalBasisRequired": true,
    "collectionAndAccessEvidenceRequired": true,
    "encryptionInTransitRequired": true,
    "encryptionAtRestRequired": true,
    "fieldLevelProtectionForRestrictedDataRequired": true,
    "pseudonymousReferencesInPublicEvidenceRequired": true,
    "secretScanningAndRedactionRequired": true,
    "processorAndTransferApprovalRequired": true,
    "privacyIncidentEscalationRequired": true
  },
  "recordIntegrity": {
    "privacyRequestMaySilentlyDeleteFinancialLedger": false,
    "correctionRequiresLinkedTombstoneOrRestatement": true,
    "legalRetentionMayBeInferredWithoutApproval": false,
    "publicEvidenceMayExposeRestrictedSource": false
  },
  "authority": {
    "aiCanApproveNewPurpose": false,
    "aiCanApproveCrossBorderTransfer": false,
    "aiCanDeclassifyRestrictedData": false,
    "singleOperatorCanExportRestrictedDataset": false
  },
  "notice": "No production data store, processor, transfer or retention schedule is represented as approved. Legal and privacy requirements must be selected for each entity and jurisdiction before processing."
}