{
    "schemaVersion": "1.0",
    "publishedAt": "2026-08-29",
    "recordType": "GO URLA Passport governance readiness",
    "publicStatus": "READINESS_PACK_PUBLISHED",
    "pilotStatus": "NOT_LAUNCHED",
    "recruitmentStatus": "CLOSED",
    "accountableOwner": null,
    "controllerIdentity": null,
    "privacyNoticeStatus": "PUBLIC_DRAFT_AWAITING_OWNER_ACCEPTANCE",
    "readiness": {
        "artifactsPublished": 5,
        "artifactsRequired": 8,
        "currentGate": "ACCOUNTABLE_OWNER_APPOINTMENT",
        "gateComplete": false
    },
    "currentPrototypeAudit": {
        "plannerPayloadTransmittedBySiteJavaScript": false,
        "serverSidePilotDatabase": false,
        "standardWebServerSecurityLogsMayExist": true,
        "localStorageKeys": [
            {
                "key": "gourla-language",
                "contents": "English/Turkish preference",
                "location": "visitor browser",
                "userDeletionAvailable": true
            },
            {
                "key": "gourla-trip-draft",
                "contents": "optional name, season, days, party, style, budget, interests, note and saved time",
                "location": "visitor browser",
                "userDeletionAvailable": true
            },
            {
                "key": "gourla-trip-draft-v2",
                "contents": "season, days, party, pace, interests, note and saved time",
                "location": "visitor browser",
                "userDeletionAvailable": true
            }
        ],
        "publicDeleteControl": "PUBLISHED"
    },
    "proposedPilotDataBoundary": {
        "allowed": [
            "random pilot identifier",
            "consent record",
            "opt-in route choices",
            "voluntary stop confirmation",
            "optional journey feedback"
        ],
        "excluded": [
            "continuous or exact live location",
            "payment card data",
            "government identity documents",
            "health data",
            "advertising trackers"
        ]
    },
    "proposedRetentionMaximums": [
        {
            "record": "unselected or withdrawn inquiry",
            "maximum": "30 days after decision or withdrawal"
        },
        {
            "record": "participant agreement and consent evidence",
            "maximum": "12 months after pilot close, unless law requires otherwise"
        },
        {
            "record": "raw journey events",
            "maximum": "90 days after pilot close"
        },
        {
            "record": "optional identifiable feedback",
            "maximum": "180 days after pilot close"
        },
        {
            "record": "minimal incident and rights-request log",
            "maximum": "24 months after closure"
        },
        {
            "record": "anonymized aggregate results",
            "maximum": "may be retained as the public evidence record"
        }
    ],
    "proposedResponseTargets": {
        "acknowledgeMaterialRequest": "2 working days",
        "resolveOrPublishReviewState": "10 working days",
        "securityEscalation": "immediate to the accountable owner",
        "legalNotification": "within applicable legal deadline after qualified assessment"
    },
    "requiredRoles": [
        {
            "role": "Accountable Pilot Owner",
            "state": "unassigned"
        },
        {
            "role": "Data Steward",
            "state": "unassigned"
        },
        {
            "role": "Operational Lead",
            "state": "unassigned"
        },
        {
            "role": "Independent Evaluator",
            "state": "unassigned"
        }
    ],
    "acceptanceGates": [
        {
            "gate": 1,
            "name": "owner mandate",
            "state": "published"
        },
        {
            "gate": 2,
            "name": "current prototype data audit",
            "state": "published"
        },
        {
            "gate": 3,
            "name": "pilot data boundary",
            "state": "published"
        },
        {
            "gate": 4,
            "name": "retention and rights matrix",
            "state": "published"
        },
        {
            "gate": 5,
            "name": "public local-data deletion control",
            "state": "published"
        },
        {
            "gate": 6,
            "name": "accountable owner appointment",
            "state": "unassigned"
        },
        {
            "gate": 7,
            "name": "signed acceptance and public contact",
            "state": "not_reached"
        },
        {
            "gate": 8,
            "name": "incident and rights-request dry run",
            "state": "not_reached"
        }
    ],
    "truthNote": "Publishing this pack does not appoint an owner, activate a privacy notice for a real-world pilot, open recruitment or authorize data collection."
}