{
  "protocol": "OIP",
  "kind": "privacy_conformance",
  "disclosure_id": "dis_d80b129eaa4f018a41c5",
  "status": "PARTIAL",
  "conformant": false,
  "tested_subset_conformant": true,
  "tested_clause_count": 6,
  "profile_clause_count": 8,
  "clauses": [
    {
      "clause": "PRIV-02",
      "pass": true,
      "evidence": "authorization binds the recorded payload hash, recipient and purpose"
    },
    {
      "clause": "PRIV-03",
      "pass": true,
      "evidence": "recipient-addressable disclosure receipt exists"
    },
    {
      "clause": "PRIV-05",
      "pass": true,
      "evidence": "disclosure appears in the queryable recipient ledger"
    },
    {
      "clause": "PRIV-06",
      "pass": true,
      "evidence": "downstream outcomes use the enumerated non-deletion states"
    },
    {
      "clause": "PRIV-07",
      "pass": true,
      "evidence": "unknown role and retention fields remain explicitly representable"
    },
    {
      "clause": "PRIV-08",
      "pass": true,
      "evidence": "role and legal basis are labeled claims, not determinations"
    }
  ],
  "not_tested": [
    "PRIV-01",
    "PRIV-04"
  ],
  "law": "Full-profile conformance requires every profile clause to pass. This runtime check does not determine GDPR, HIPAA, privilege, trade-secret status or other legal compliance."
}