{
  "code": "GOV-05",
  "slug": "append-only-review-ledger",
  "title": "Append-Only Review Ledger",
  "category": "Governance",
  "status": "Current",
  "version": "2.0.4-wip",
  "summary": "Defines browser-local lifecycle evidence where corrections are new reversal or superseding entries rather than edits.",
  "keywords": [
    "review ledger",
    "append only",
    "reversal",
    "supersede",
    "reason code"
  ],
  "mission_phases": [
    "Plan",
    "Validate",
    "Deliver",
    "Debrief"
  ],
  "canonical": "https://iarpg.com/standard/append-only-review-ledger",
  "json": "https://iarpg.com/records/append-only-review-ledger.json",
  "requirements": [
    {
      "level": "MUST",
      "text": "Every ledger entry include unique ID, UTC time, artifact ID and digest, action, result, reason code, standard, parent IDs, and extensions."
    },
    {
      "level": "MUST",
      "text": "Historical entries never be mutated in place."
    },
    {
      "level": "MUST",
      "text": "Corrections use a new reversal or superseding entry linked to the earlier entry."
    },
    {
      "level": "SHOULD",
      "text": "Ledger exports remain deterministic under IARPG-CJSON-1."
    }
  ],
  "research": [
    {
      "label": "Immutable records and UTC telemetry",
      "href": "/docs/report/monetary-architecture-genesis-allowance-and-economic-stabilization#ledger-schema-and-telemetry",
      "note": "Supports immutable records, reversals, and UTC event time."
    },
    {
      "label": "Evidence-based review and jurisdiction",
      "href": "/docs/report/justice-system-and-warrant-escalation-for-rogue-intelligence#recommended-warrant-architecture",
      "note": "Supports explainable evidence thresholds and reviewable decisions."
    }
  ],
  "related": [
    "non-authenticating-provenance-envelope",
    "mission-event-logging"
  ],
  "roles": [
    "Operative",
    "Handler",
    "Intelligence Analyst",
    "Technical Operator",
    "Counterintelligence Officer",
    "Liaison Officer",
    "Logistics Specialist",
    "Source Handler"
  ],
  "interaction_types": [
    "Review",
    "Validate",
    "Record",
    "Export",
    "Recover"
  ],
  "authority_types": [
    "Civil administration",
    "Military command",
    "Commercial intelligence service",
    "International verification body",
    "Scientific or infrastructure consortium",
    "Independent investigative network"
  ],
  "collection_disciplines": [],
  "conformance_level": "Level D — Simulatable",
  "implementation_maturity": "Published WIP",
  "release": "IARPG-OPS-2",
  "revised_utc": "2026-07-20T12:04:07Z",
  "purpose": "Defines browser-local lifecycle evidence where corrections are new reversal or superseding entries rather than edits.",
  "rationale": "Portable intelligence-operation artifacts require inspectable boundaries, deterministic evidence, explicit recovery, and no silent loss or identity overclaim.",
  "game_interaction": [
    "Inspect artifact",
    "Compare evidence",
    "Record reason code",
    "Export local result"
  ],
  "inputs": [
    "Browser-local artifact",
    "Applicable standard",
    "Declared source context"
  ],
  "outputs": [
    "Reviewable result",
    "Reason code",
    "Local export",
    "Preserved original"
  ],
  "state_transitions": [
    {
      "from": "received",
      "event": "requirement evaluated",
      "to": "accepted, quarantined, or rejected-with-source-untouched"
    }
  ],
  "evidence_and_provenance": [
    "Record source artifact ID, canonical digest, UTC event time, responsible local role label, and reason code.",
    "Do not convert a digest, label, or generated statement into an identity or authoritative fact claim."
  ],
  "ui_requirements": [
    "Show the record code and requirement level at the point of use.",
    "Expose the reason for pass, fail, quarantine, recovery, or rejection.",
    "Provide direct links to canonical human and machine records."
  ],
  "accessibility_requirements": [
    "Essential information is available without reliance on color, audio, motion, or a graph alone.",
    "Keyboard, screen-reader, reduced-motion, high-zoom, mobile, and print equivalents are documented."
  ],
  "telemetry_events": [
    {
      "name": "standard.append-only-review-ledger.evaluated",
      "required_fields": [
        "event_id",
        "timestamp_utc",
        "artifact_id",
        "record_code",
        "result",
        "reason_code"
      ]
    }
  ],
  "abuse_and_exploit_cases": [
    "A participant attempts to remove unknown data during import or migration.",
    "A digest or declared label is presented as proof of human identity or approval.",
    "A consequential record is overwritten without a reason or preserved original."
  ],
  "failure_behavior": "Fail closed for irreversible publication or overwrite. Preserve original content, show the failing requirement, and allow export or non-destructive recovery.",
  "recovery_behavior": "Retain the original artifact and review event, clone any repaired draft, and require a new explicit validation event before continuing.",
  "example_implementation": "The local tool evaluates GOV-05, writes a UTC reason-coded result, and exposes both original and resulting artifacts for export.",
  "evidence_requirement": "Reviewable provenance and deterministic local evidence required",
  "related_examples": [
    "port-access-anomaly-investigation"
  ],
  "revision_history": [
    {
      "version": "2.0.4-wip",
      "date_utc": "2026-07-20T12:04:07Z",
      "note": "Initial GOV-05 publication for IARPG-OPS-2 release-candidate hardening."
    }
  ]
}