
# Governance, EDENA, and Data Boundaries

## Personal admission classes

| Class | Personal target treatment |
|---|---|
| `MR-DATA-0` | Public authoritative nonsensitive source with version, date, applicability, and limits |
| `MR-DATA-1` | Unmistakably fictional/synthetic material |
| `MR-DATA-2` | Minimum resident-owned nonsensitive plans, goals, preferences, drafts, and abstract screened non-reconstructable reflection |
| `MR-DATA-W` | Personally isolated whole-life content; manual/local only and never sent to a model, provider, agent or tool; never badge, evaluation, program, employer, QI/research, analytics, or institutional export data |
| `MR-DATA-M` | Opaque minimum routing metadata without sensitive payload |
| `MR-DATA-R` | Locally generated content-free `MRREF-<UUIDv4>` receipt ID; nonresolving, stores no official identifier or mapping, and never proves external completion |

`MR-DATA-P` and `MR-DATA-A` are declared for a separately provisioned institution-managed extension and are unavailable here. `MR-DATA-C`, `MR-DATA-E`, `MR-DATA-S`, and `MR-DATA-X` are rejected before echo and persistence.

Model/agent payload eligibility is narrower than local admission: only `MR-DATA-0/1/2` may be considered after exact consent and task screening. `MR-DATA-W` is manual/local only. `MR-DATA-M/R` are content-free local control metadata and never prompt or agent payload. Agent-specific registries may narrow `0/1/2` further but can never widen them.

Abstract reflection contains no patient, family, learner, coworker, event, team, or institution-identifying story. “I removed the name” is not proof. Never redact, summarize, translate, embed, hash, or transform a real case into an admitted case.

## ATTEND

1. Activity and active hat.
2. Training level and task entrustment.
3. Team and attending.
4. Environment, evidence, and data.
5. Need for escalation.
6. Decision, documentation, and destination.

AI records resident-supplied references and prepares questions. It never grants entrustment, competence, procedure authorization, attending agreement, program approval, or institution verification. Missing, stale, expired, conflicting, or materially changed consequential fields result in **Unverified — authorized human confirmation required**.

## CIRCLE and ORBIT

CIRCLE preserves context/goals, identified accountability, roles/consults, closed loops/contingencies, limits/escalation, and end state/transition. In this target it is fictional or process-only; it never becomes a shadow chart, sign-out, task list, patient promise, or responsibility transfer.

ORBIT freezes objective/owner, role/risk/responsibility, boundaries/budget, inspect/test, and transfer/terminate. P0 is default. P1/P2 are one-run, hash-bound, expiring, no-retry permissions. P3/P4 are unavailable here. P5 is prohibited.

## EDENA

EDENA is implementation-generated and independent of data class, ATTEND, permission, and `absolute_stop`:

- Unclassified: incomplete; no model, agent, export, or recommendation.
- Green: low-risk private planning, public sources, simple synthetic exercises.
- Yellow: source synthesis, fictional reasoning, resident-controlled reflection, communication rehearsal.
- Orange: consequential preparation such as supervision, duty/fatigue, procedures, credentials, legal/financial questions, QI/research preparation, teaching/public release, or P2 use; draft/questions only.
- Red: patient/live-care, sensitive, prohibited, deceptive, coercive, unsafe, or institutionally consequential work.

Personal Red with no absolute stop may only open a new clean generic/fictional mission after deliberate acknowledgment. The original payload is discarded. Institutional Red remains blocked. `absolute_stop=true` is never waivable.

## Absolute stops

Hard-stop PHI/reconstructable narratives; charts/media/recordings; patient-specific diagnosis, prognosis, treatment, medication, procedure, device, monitoring, consent, capacity, code status, disposition, discharge, or follow-up; orders/prescriptions/notes/pages/consults/handoffs/messages; emergency delay; authority or fitness determinations; Milestone/CCC/promotion/remediation predictions; evaluation/ranking/surveillance; M&M/event/peer-review reconstruction or blame; QI/research/IRB determinations or real execution; restricted exams/fabricated case logs/claims; protected-trait inference; secrets/impersonation; cross-partition retrieval; and hidden or escalating agents.
