{"id":"portalkinetic-procurement-proof-v1","product":"PortalKinetic Relief OS","telemetryContract":{"included":["event type","event count","unique-user count","day-level date","reporting period","suppression metadata"],"excluded":["user_id or raw email","Mental Unload text or journal content","private task titles or capture notes","individual reset history","raw payloads or sub-day timestamps","keystroke timing or typing cadence","mouse dynamics, gaze tracking, or screen monitoring","HRIS, compensation, promotion, discipline, or termination exports"]},"cohortSuppression":{"reliefOsMinimumCohort":10,"focusAccountabilityMinimumCohort":8,"note":"Relief OS aggregate reporting suppresses below a cohort of 10. Focus Accountability (Chitta) is a separate bounded context with isolated chitta_* tables and suppresses below 8. Both are enforced in code, not policy.","enforcedBy":["packages/enterprise-pilot-os/src/proofReport.ts","packages/founder-support-intelligence/src/caseStudySafety.ts","packages/chitta-core/src/domain/teamAggregate.ts"],"isolationGate":"npm run check:chitta-isolation"},"exampleBuyerPayload":{"org_id":"org_2f6c1b90","period":{"start":"2026-08-01","end":"2026-08-31"},"cohort":{"size":42,"suppressed":false,"minimum_required":10},"adoption":{"active_participants":42,"sessions_started":318,"sessions_ended_cleanly":209,"next_moves_accepted":174},"notes":"Counts only. No identity, no content, no individual row, no inference."},"authorizationAndTenantBoundary":{"rowLevelSecurity":"Enabled on tenant tables; ordinary app access is scoped by policy.","adminRoutes":"All /api/v1/admin/* fail closed via requireAdmin(); solo-operator surfaces require isSuperadminWithoutOrg.","orgMutations":"Access-boundary changes require org owner or platform admin.","privilegedAccess":"We do not claim a privileged database operator is technically incapable of access. That is governed by separate operational, contractual, and audit controls, and we will describe them rather than overstate the architecture.","evidence":["npm run check:enterprise-privacy","packages/life-sync-engine/src/__tests__/lifeSyncRlsMigration.test.ts"]},"readiness":{"soc2":"readiness artifacts available on request — not a completed certification claim","hipaa":"not a covered entity workflow; no clinical diagnosis or treatment claims"},"gates":["npm run check:no-biometric-ingestion","npm run check:eu-ai-act-language","npm run check:enterprise-privacy"]}