{
  "schema_version": "2026-06-02.data-stewardship-questions.v1",
  "surface": "main_website",
  "owner": "main_website_release_desk",
  "purpose": "Machine-readable public standing question set for reviewing QUAD public datasets before they are quoted, displayed, integrated, or used for action.",
  "updated": "2026-06-02",
  "question_rule": "Good data makes action legible. It does not replace the local law that decides whether action is allowed.",
  "must_not_infer": [
    "current_chain_state",
    "current_block_height",
    "current_balance",
    "payload_truth",
    "payload_access",
    "custody_proof",
    "admission_proof",
    "settlement_proof",
    "liquidity_proof",
    "sale_access",
    "reward_eligibility",
    "allocation",
    "production_value_movement",
    "economic_activation",
    "external_validation"
  ],
  "question_groups": [
    {
      "group_id": "meaning_and_owner",
      "public_label": "meaning and owner",
      "review_questions": [
        {
          "question_id": "dataset_purpose",
          "question": "What is this dataset trying to let someone know?",
          "required_answer_shape": "Plain purpose, owner surface, and action class if any.",
          "bad_answer_signal": "The answer is only a metric name, marketing phrase, or private implementation label.",
          "downgrade_behavior": "If purpose is unclear, keep the dataset at orientation-only or do not publish it.",
          "must_not_infer": [
            "product_availability",
            "current_state",
            "economic_activation"
          ]
        },
        {
          "question_id": "meaning_owner",
          "question": "Which chain or product surface owns that meaning?",
          "required_answer_shape": "Core, Infra, Bridge, Liquid, main website, or named external owner with scope.",
          "bad_answer_signal": "The answer merges sibling chains or treats the main website as chain authority.",
          "downgrade_behavior": "If owner is unclear, route the claim to cannot verify or owner review.",
          "must_not_infer": [
            "sibling_authority",
            "owner_acceptance",
            "chain_authority"
          ]
        },
        {
          "question_id": "producer_module_or_route",
          "question": "Which module, route, receipt, endpoint, export, or public source produced it?",
          "required_answer_shape": "Named public route, source class, source owner, and schema family where applicable.",
          "bad_answer_signal": "The answer relies on screenshots, chat, assistant text, or old local files without owner route.",
          "downgrade_behavior": "If producer cannot be named, treat as local-only or unsupported.",
          "must_not_infer": [
            "source_truth",
            "current_state",
            "external_validation"
          ]
        }
      ]
    },
    {
      "group_id": "evidence_and_freshness",
      "public_label": "evidence and freshness",
      "review_questions": [
        {
          "question_id": "evidence_class",
          "question": "What evidence class does it currently have?",
          "required_answer_shape": "Observation, receipt, proof, refusal, endpoint contract, release check, static fallback, cached export, or external reference.",
          "bad_answer_signal": "The answer treats display, visibility, or route existence as proof of stronger state.",
          "downgrade_behavior": "If evidence class is unclear, use cannot verify or orientation-only.",
          "must_not_infer": [
            "custody_proof",
            "admission_proof",
            "settlement_proof",
            "economic_activation"
          ]
        },
        {
          "question_id": "freshness_limit",
          "question": "How old can it be before it must degrade?",
          "required_answer_shape": "Freshness window, max-age label, stale behavior, updated field, height, timestamp, release hash, or cannot-verify rule.",
          "bad_answer_signal": "The route displays a value without age, fallback label, owner timestamp, or release receipt.",
          "downgrade_behavior": "If freshness cannot be named, quote fallback, stale, unavailable, local-package-only, or cannot verify.",
          "must_not_infer": [
            "current_state",
            "live_route",
            "route_repaired"
          ]
        },
        {
          "question_id": "failure_behavior",
          "question": "What happens if it is missing, stale, challenged, or contradicted?",
          "required_answer_shape": "Refusal, quarantine, stale label, duplicate behavior, conflict rule, support path, or terminal state.",
          "bad_answer_signal": "The dataset can show success but cannot show refusal, stale, terminal, or conflict states.",
          "downgrade_behavior": "If failure behavior is missing, do not use the dataset for action paths.",
          "must_not_infer": [
            "silent_success",
            "hidden_pending_action",
            "route_open"
          ]
        }
      ]
    },
    {
      "group_id": "consumer_and_inference",
      "public_label": "consumer and inference",
      "review_questions": [
        {
          "question_id": "safe_inference",
          "question": "What can a wallet, website, chain, or reader safely infer from it?",
          "required_answer_shape": "Named consumer class, allowed use, required checks, and safe next action.",
          "bad_answer_signal": "The answer says useful, trusted, official, live, or verified without consumer-specific limits.",
          "downgrade_behavior": "If safe inference is unclear, use the consumer contract or keep the dataset orientation-only.",
          "must_not_infer": [
            "consumer_authority",
            "integration_ready",
            "route_open"
          ]
        },
        {
          "question_id": "forbidden_inference",
          "question": "What must they never infer from it?",
          "required_answer_shape": "Dataset-specific must-not-infer list covering value, custody, admission, settlement, liquidity, rewards, allocation, launch, and external validation where relevant.",
          "bad_answer_signal": "The answer omits money, route-opening, authority, reward, or owner-acceptance boundaries.",
          "downgrade_behavior": "If forbidden inference is missing, do not publish or integrate the dataset until boundaries are written.",
          "must_not_infer": [
            "sale_access",
            "reward_eligibility",
            "allocation",
            "economic_activation"
          ]
        }
      ]
    },
    {
      "group_id": "visibility_and_trust",
      "public_label": "visibility and trust",
      "review_questions": [
        {
          "question_id": "public_need",
          "question": "Does it reveal anything the public surface does not need?",
          "required_answer_shape": "Redaction class, private field class, public allowed fields, and private detail boundary.",
          "bad_answer_signal": "The dataset includes payloads, private routes, credentials, private procedure, sensitive thresholds, or provider details without a public product need.",
          "downgrade_behavior": "If public need is unclear, redact, aggregate, delay, or keep private.",
          "must_not_infer": [
            "payload_truth",
            "provider_identity",
            "private_operator_procedure",
            "custody_proof"
          ]
        },
        {
          "question_id": "trust_from_action",
          "question": "Does it hide anything needed for trust-from-action?",
          "required_answer_shape": "Public owner, state, proof class, receipt id or route, freshness, next public check, and boundary where applicable.",
          "bad_answer_signal": "The dataset hides stop states, owner, receipt, freshness, refusal, or next check while asking the reader to act.",
          "downgrade_behavior": "If trust-from-action is incomplete, keep the action closed, refused, partial, or cannot verify.",
          "must_not_infer": [
            "action_ready",
            "route_open",
            "product_availability",
            "economic_activation"
          ]
        }
      ]
    }
  ],
  "review_outcomes": [
    {
      "outcome_id": "publish_with_boundary",
      "public_label": "publish with boundary",
      "condition": "All standing questions have enough public answers for the dataset's allowed use.",
      "safe_next_action": "Publish or keep published with owner, freshness, evidence class, consumer contract, and must-not-infer boundary attached.",
      "must_not_infer": [
        "universal_authority",
        "sibling_chain_acceptance",
        "economic_activation"
      ]
    },
    {
      "outcome_id": "publish_as_orientation_only",
      "public_label": "publish as orientation only",
      "condition": "The dataset helps explain meaning but lacks enough proof for action, current state, or integration.",
      "safe_next_action": "Label as orientation, fallback, cached, local-package-only, or cannot verify.",
      "must_not_infer": [
        "ready_for_action",
        "current_state",
        "owner_acceptance"
      ]
    },
    {
      "outcome_id": "hold_or_redact",
      "public_label": "hold or redact",
      "condition": "The dataset exposes unnecessary private detail or lacks public need.",
      "safe_next_action": "Remove private fields, aggregate, delay, or keep the dataset private.",
      "must_not_infer": [
        "payload_truth",
        "provider_identity",
        "private_operator_procedure"
      ]
    },
    {
      "outcome_id": "refuse_or_request_owner_review",
      "public_label": "refuse or request owner review",
      "condition": "Owner, purpose, evidence, freshness, consumer, or failure behavior is missing or contradicted.",
      "safe_next_action": "Refuse stronger claims and request owner-published evidence or a narrower dataset.",
      "must_not_infer": [
        "route_open",
        "product_availability",
        "economic_activation"
      ]
    }
  ],
  "global_review_rules": [
    "Answer the standing questions before treating a dataset as a public data product.",
    "If a question cannot be answered, the dataset must downgrade before it is quoted or used.",
    "A dataset can be useful and still be unready for action.",
    "A dataset can be public and still be forbidden for wallets, keepers, pricing engines, or cross-chain importers.",
    "The right public data surface should make safe action easier and unsafe inference harder."
  ]
}
