PRIVACY + CONSENT INTEGRITY · 0.2-PV1

Life at home
is not training data.

WANTED measures voluntary coexistence. That choice is meaningless if the robot hides where data goes, records people before notice, keeps raw media, ignores deletion, or continues processing after withdrawal. Profile 0.2-PV1 turns those boundaries into seven reproducible field gates.

Verify a manifest ↓Download templateOpen contract
100%PROCESSING FLOWS DECLARED
0RAW MEDIA EXPORTS
100%NOTICE + INDICATOR COVERAGE
0RANKING EFFECT
01 / OPERATING BOUNDARY

Consent must survive
contact with reality.

A policy document is not evidence. WANTED binds declared purposes to observed flows, notices to processing time, retention to object counts, and every rights request to completion and residual-copy evidence.

01MAP EVERY FLOW

Robot, edge, cloud, human support, and vendor processing must appear once in the controlled inventory.

02NOTICE BEFORE SENSING

Activation, just-in-time change, guest, and service-person notices precede the relevant processing.

03MINIMIZE LOCALLY

Raw household media stays local; only necessary, declared, redacted or derived data can cross the boundary.

04DELETE ON THE CLOCK

Retention limits, rights requests, withdrawal, residual copies, and breach timing are independently checked.

02 / HOUSEHOLD BOUNDARY

Visible sensing.
Local minimization.

Whenever a sensor is active, its physical indicator must be active. Guest notice coverage is computed over every due encounter. Privacy-zone violations, raw exports, unauthorized access, residual deletion copies, and post-withdrawal processing must all equal zero.

PASSING PUBLIC DISCLOSUREcoverage = completed before processing / due

For guest notice, rights SLAs, and sensor indication, the passing value is exactly 1. For forbidden events, the passing count is exactly 0.

AGGREGATE EVIDENCE ONLY · NO PARTICIPANT DATA
03 / LOCAL REPRODUCTION

Bring the evidence.
Keep the household private.

The browser checker reconstructs all public aggregate metrics and seven hard gates locally. It requires cryptographic bindings to the protected controlled register; it never asks you to publish names, addresses, audio, images, or video.

LOCAL · ZERO UPLOADPRIVACY 0.2-PV1 VERIFIER
READY TO REPRODUCE

The verifier runs only in this browser. Paste an aggregate manifest; never paste household media or participant identifiers.

BENCHMARK GATE, NOT LEGAL APPROVAL

Passing 0.2-PV1 is necessary for field certification. It cannot increase W, excuse a safety failure, break a tie, or substitute for jurisdiction-specific legal and ethics review.

OPEN CERTIFICATION MATRIX →