{"version":"2026-10-05.draft","status":"DRAFT, early preview; not reviewed by counsel","transient_deleted":{"nonces":"deleted after expiry (<= 2 minutes)","rate_limits":"deleted after 5 minutes","webauthn_challenges":"deleted after expiry (5 minutes)","env_recoveries":"deleted 1 day after expiry","approvals_used":"deleted 2 days after use (approvals live <= 15 minutes)"},"never_deleted":["agents","agent_keys","licenses","passport_events","audit_log","stamps","log_leaves","log_nodes","log_checkpoints","log_cosignatures","spend_ledger"],"never_deleted_why":"Permanent passport ids and an append-only, verifiable history are the product. DB triggers refuse UPDATE/DELETE on these tables.","personal_data":"The public registry holds no names or contact details. Stamps are stored hash-only. Operators choose what labels they register.","sandbox_rows":"Demo sandbox rows (origins *.sandbox.example) are labelled 'sandbox' everywhere and stay in the append-only tables; their KV state (demo keys) expires after 24 h.","legal_version":"2026-10-05.draft-1"}