{ "schemaVersion": "external-review-handoff/v1", "packId": "ERH-3SERVICES-20260712-03", "generatedAt": "2026-07-12T18:09:35+09:00", "scope": { "releaseCandidate": "v13", "internalEvidenceBaseline": "v10", "internalPolicyBaseline": "v1.1", "currentPolicyVersion": "v1.2", "accessMode": "owner-only", "services": [ { "id": "grocery", "name": "안전알뜰 장바구니", "liveUrl": "https://safe-budget-grocery-mvp.jongmin333.chatgpt.site", "baselineCommit": "6b3f0be3c01e16b87cb62a5153244bfc4aaecec5", "candidateMaterialCommit": "7e133321f499a224ddbb472a78702aacce0012ef" }, { "id": "runway", "name": "독립런웨이", "liveUrl": "https://independence-runway-mvp.jongmin333.chatgpt.site", "baselineCommit": "36aafeb655a659304973b76fd3139072e4468048", "candidateMaterialCommit": "62e2118bb768b373336a6ec9f6832fb674fc51a7" }, { "id": "care", "name": "케어링", "liveUrl": "https://care-ring-operations-mvp.jongmin333.chatgpt.site", "baselineCommit": "d774d2cc893dfa0a4c736292a7f0dbb5087a33ff", "candidateMaterialCommit": "db7d46a32e141bd85c6024eee1ac73fd7bac7816" } ] }, "operatorFacts": { "operationType": "individual-nonbusiness", "corporation": false, "soleProprietor": false, "businessFields": "not-applicable", "privateResidence": { "requested": false, "collected": false, "published": false }, "publicContact": { "displayName": "개인 운영자 김종민", "email": "omnilude@gmail.com", "provenanceSourceIds": [ "SRC-OMNI-TERMS", "SRC-OMNI-PRIVACY" ], "publicValuesOnly": true }, "automaticExemptionReliedOn": false, "googleConsumerAutomaticallyClassified": false }, "processingBoundaries": [ { "id": "local-browser", "category": "app-local", "serviceIds": [ "grocery", "runway", "care" ], "data": "이용자가 선택한 최대 64 KiB redacted 외부검토 반환 JSON의 pack·result ID와 digest·유효시각, 3 track의 비식별 reviewer·provenance ref·자격 유형·관할·이해상충, 12문항 판정·제한·adverse·unresolved·source/evidence ref, verification·declared status enum과 서비스별 로컬 값·저식별 fixture; 실제 이름·이메일·주소·사업자 값·비밀은 허용하지 않음", "purpose": "기기 안 계획·비교·돌봄 운영 및 외부검토 반환값의 구조·freshness 확인", "currentMode": "선택한 반환 JSON을 브라우저 메모리에서만 구조·freshness 확인; 업로드·네트워크 전송·영구저장·입력 로그·원문·파일명 표시·app-owned remote telemetry 없음", "externalActor": null, "contractualFact": null, "unresolved": "원본 로컬 파일 삭제는 앱 범위 밖이며, 공유 기기·브라우저 백업·다운로드 사본·로컬 시계와 서명·검토자 신원·자격은 별도 독립 검증 필요" }, { "id": "rights-gmail", "category": "user-initiated-external-email", "serviceIds": [ "grocery", "runway", "care" ], "data": "이용자가 직접 발송하는 이메일 주소·본문·첨부·송수신 메타데이터", "purpose": "권리요청·개인정보 문의 접수와 회신", "currentMode": "live Gmail lifecycle 미승인; 실왕복 미실시", "externalActor": "Google/Gmail and the sender's mail provider", "contractualFact": "Google 공개 약관·개인정보·삭제 안내만 수집", "unresolved": "계정 유형·운영자 보유기간·삭제·하위처리자·위탁·국외이전·사고지원 분류" }, { "id": "sites-hosted-data", "category": "managed-hosting", "serviceIds": [ "grocery", "runway", "care" ], "data": "Hosted Data와 DPA Schedule에 언급된 user-provided content 및 생성 로그·usage·device·cookie 범주", "purpose": "사이트 호스팅·유지보수·지원", "currentMode": "owner-only Sites hosting", "externalActor": "OpenAI ChatGPT Sites", "contractualFact": "2026-07-09 Sites Terms는 OpenAI가 이용자를 대신해 호스팅한다고 설명하고, 개인용 Sites DPA는 Hosted Data에 대해 OpenAI를 processor로 설명", "unresolved": "현재 계정 적용성, 실제 필드·보관·삭제·subprocessor·국외처리와 한국법상 위탁·국외이전 분류" }, { "id": "public-data-providers", "category": "fixture-only-provider-adapters", "serviceIds": [ "grocery", "runway", "care" ], "data": "공식 공개정보를 본뜬 결정론적 fixture", "purpose": "가격·취업·주거·돌봄 정보의 데모 비교", "currentMode": "live provider calls 없음", "externalActor": "provider links only", "contractualFact": "대표 공식 링크와 공개 이용조건 기준선만 사용", "unresolved": "실 API 이용허락·키·갱신·장애·철회·attribution 조건" } ], "gateSnapshot": { "privacyRiskDecision": "NO-GO", "gmailLifecycle": "draft-unapproved", "gmailSecurity": "not-checked-15", "liveSyntheticGmail": "not-run", "legalReview": "not-started", "sitesKoreanLegalClassification": "unresolved", "actualIncidentReadiness": "partial", "publicExpansionAllowed": false }, "reviewQuestions": [ { "id": "LEGAL-01", "track": "legal", "mandatory": true, "prompt": "실제 처리 흐름상 개인정보처리자 해당 여부와 적용 범위는 무엇인가? 개인·비사업자를 자동 면제 근거로 쓰지 않는다.", "serviceIds": [ "grocery", "runway", "care" ], "status": "pending-external-review", "determination": null, "conclusion": null, "limitations": "공식 공개자료와 내부 redacted 요약만 준비됨. 실제 계정·provider 답변·전문가 판단은 없음.", "sourceIds": [ "SRC-PIPA", "SRC-PIPC-2026-GUIDE" ], "evidenceRefs": [ "ERH-SNAPSHOT-GROCERY-V10", "ERH-SNAPSHOT-RUNWAY-V10", "ERH-SNAPSHOT-CARE-V10", "ERH-DIFF-GROCERY-V11", "ERH-DIFF-RUNWAY-V11", "ERH-DIFF-CARE-V11", "ERH-DIFF-GROCERY-V12", "ERH-DIFF-RUNWAY-V12", "ERH-DIFF-CARE-V12", "ERH-DIFF-GROCERY-V13", "ERH-DIFF-RUNWAY-V13", "ERH-DIFF-CARE-V13" ], "nonApplicabilityBasis": null }, { "id": "LEGAL-02", "track": "legal", "mandatory": true, "prompt": "서비스별 처리 항목·목적·법적 근거·최소수집·민감정보 제한은 충분한가?", "serviceIds": [ "grocery", "runway", "care" ], "status": "pending-external-review", "determination": null, "conclusion": null, "limitations": "공식 공개자료와 내부 redacted 요약만 준비됨. 실제 계정·provider 답변·전문가 판단은 없음.", "sourceIds": [ "SRC-PIPA", "SRC-PIPC-2026-GUIDE" ], "evidenceRefs": [ "ERH-SNAPSHOT-GROCERY-V10", "ERH-SNAPSHOT-RUNWAY-V10", "ERH-SNAPSHOT-CARE-V10", "ERH-DIFF-GROCERY-V11", "ERH-DIFF-RUNWAY-V11", "ERH-DIFF-CARE-V11", "ERH-DIFF-GROCERY-V12", "ERH-DIFF-RUNWAY-V12", "ERH-DIFF-CARE-V12", "ERH-DIFF-GROCERY-V13", "ERH-DIFF-RUNWAY-V13", "ERH-DIFF-CARE-V13" ], "nonApplicabilityBasis": null }, { "id": "LEGAL-03", "track": "legal", "mandatory": true, "prompt": "처리방침·투명성·책임정보 요건과 기존 공개 이름·이메일의 충분성은 무엇인가?", "serviceIds": [ "grocery", "runway", "care" ], "status": "pending-external-review", "determination": null, "conclusion": null, "limitations": "공식 공개자료와 내부 redacted 요약만 준비됨. 실제 계정·provider 답변·전문가 판단은 없음.", "sourceIds": [ "SRC-PIPA", "SRC-PIPC-2026-GUIDE", "SRC-OMNI-TERMS", "SRC-OMNI-PRIVACY" ], "evidenceRefs": [ "ERH-SNAPSHOT-GROCERY-V10", "ERH-SNAPSHOT-RUNWAY-V10", "ERH-SNAPSHOT-CARE-V10", "ERH-DIFF-GROCERY-V11", "ERH-DIFF-RUNWAY-V11", "ERH-DIFF-CARE-V11", "ERH-DIFF-GROCERY-V12", "ERH-DIFF-RUNWAY-V12", "ERH-DIFF-CARE-V12", "ERH-DIFF-GROCERY-V13", "ERH-DIFF-RUNWAY-V13", "ERH-DIFF-CARE-V13" ], "nonApplicabilityBasis": null }, { "id": "LEGAL-04", "track": "legal", "mandatory": true, "prompt": "열람·정정·삭제·처리정지, 비례적 본인확인, 법 적용 시 10일 결과통지와 예외를 어떻게 운영해야 하는가?", "serviceIds": [ "grocery", "runway", "care" ], "status": "pending-external-review", "determination": null, "conclusion": null, "limitations": "공식 공개자료와 내부 redacted 요약만 준비됨. 실제 계정·provider 답변·전문가 판단은 없음.", "sourceIds": [ "SRC-PIPA", "SRC-PIPA-ENFORCEMENT" ], "evidenceRefs": [ "ERH-TEST-GROCERY-V10", "ERH-TEST-RUNWAY-V10", "ERH-TEST-CARE-V10", "ERH-DIFF-GROCERY-V11", "ERH-DIFF-RUNWAY-V11", "ERH-DIFF-CARE-V11", "ERH-DIFF-GROCERY-V12", "ERH-DIFF-RUNWAY-V12", "ERH-DIFF-CARE-V12", "ERH-DIFF-GROCERY-V13", "ERH-DIFF-RUNWAY-V13", "ERH-DIFF-CARE-V13" ], "nonApplicabilityBasis": null }, { "id": "LEGAL-05", "track": "legal", "mandatory": true, "prompt": "요청 종결 후 보유·파기·법적 보존·분쟁 예외와 최소 처리기록 기간은 무엇인가?", "serviceIds": [ "grocery", "runway", "care" ], "status": "pending-external-review", "determination": null, "conclusion": null, "limitations": "공식 공개자료와 내부 redacted 요약만 준비됨. 실제 계정·provider 답변·전문가 판단은 없음.", "sourceIds": [ "SRC-PIPA", "SRC-PIPA-ENFORCEMENT", "SRC-GOOGLE-RETENTION" ], "evidenceRefs": [ "ERH-RISK-GROCERY-V10", "ERH-RISK-RUNWAY-V10", "ERH-RISK-CARE-V10", "ERH-DIFF-GROCERY-V11", "ERH-DIFF-RUNWAY-V11", "ERH-DIFF-CARE-V11", "ERH-DIFF-GROCERY-V12", "ERH-DIFF-RUNWAY-V12", "ERH-DIFF-CARE-V12", "ERH-DIFF-GROCERY-V13", "ERH-DIFF-RUNWAY-V13", "ERH-DIFF-CARE-V13" ], "nonApplicabilityBasis": null }, { "id": "LEGAL-06", "track": "legal", "mandatory": true, "prompt": "Gmail·Sites의 처리위탁·국외이전·안전조치와 법정 영향평가 적용 대상 여부는 무엇인가?", "serviceIds": [ "grocery", "runway", "care" ], "status": "pending-external-review", "determination": null, "conclusion": null, "limitations": "공식 공개자료와 내부 redacted 요약만 준비됨. 실제 계정·provider 답변·전문가 판단은 없음.", "sourceIds": [ "SRC-PIPA", "SRC-SITES-TERMS", "SRC-SITES-DPA", "SRC-GOOGLE-PRIVACY" ], "evidenceRefs": [ "ERH-RISK-GROCERY-V10", "ERH-RISK-RUNWAY-V10", "ERH-RISK-CARE-V10", "ERH-DIFF-GROCERY-V11", "ERH-DIFF-RUNWAY-V11", "ERH-DIFF-CARE-V11", "ERH-DIFF-GROCERY-V12", "ERH-DIFF-RUNWAY-V12", "ERH-DIFF-CARE-V12", "ERH-DIFF-GROCERY-V13", "ERH-DIFF-RUNWAY-V13", "ERH-DIFF-CARE-V13" ], "nonApplicabilityBasis": null }, { "id": "GMAIL-01", "track": "gmail", "mandatory": true, "prompt": "한국 Google 약관상 현재 계정 유형과 공식 권리요청 채널 이용 가능성은 무엇인가? 개인이라는 이유로 consumer로 자동 분류하지 않는다.", "serviceIds": [ "grocery", "runway", "care" ], "status": "pending-external-review", "determination": null, "conclusion": null, "limitations": "공식 공개자료와 내부 redacted 요약만 준비됨. 실제 계정·provider 답변·전문가 판단은 없음.", "sourceIds": [ "SRC-GOOGLE-TERMS-CURRENT", "SRC-GOOGLE-TERMS-UPCOMING" ], "evidenceRefs": [ "ERH-SNAPSHOT-GROCERY-V10", "ERH-SNAPSHOT-RUNWAY-V10", "ERH-SNAPSHOT-CARE-V10", "ERH-DIFF-GROCERY-V11", "ERH-DIFF-RUNWAY-V11", "ERH-DIFF-CARE-V11", "ERH-DIFF-GROCERY-V12", "ERH-DIFF-RUNWAY-V12", "ERH-DIFF-CARE-V12", "ERH-DIFF-GROCERY-V13", "ERH-DIFF-RUNWAY-V13", "ERH-DIFF-CARE-V13" ], "nonApplicabilityBasis": null }, { "id": "GMAIL-02", "track": "gmail", "mandatory": true, "prompt": "Gmail 처리 항목·주체·위치·하위처리자·권리·침해사고 지원 경계는 무엇인가?", "serviceIds": [ "grocery", "runway", "care" ], "status": "pending-external-review", "determination": null, "conclusion": null, "limitations": "공식 공개자료와 내부 redacted 요약만 준비됨. 실제 계정·provider 답변·전문가 판단은 없음.", "sourceIds": [ "SRC-GOOGLE-PRIVACY", "SRC-GOOGLE-SECURITY" ], "evidenceRefs": [ "ERH-RISK-GROCERY-V10", "ERH-RISK-RUNWAY-V10", "ERH-RISK-CARE-V10", "ERH-DIFF-GROCERY-V11", "ERH-DIFF-RUNWAY-V11", "ERH-DIFF-CARE-V11", "ERH-DIFF-GROCERY-V12", "ERH-DIFF-RUNWAY-V12", "ERH-DIFF-CARE-V12", "ERH-DIFF-GROCERY-V13", "ERH-DIFF-RUNWAY-V13", "ERH-DIFF-CARE-V13" ], "nonApplicabilityBasis": null }, { "id": "GMAIL-03", "track": "gmail", "mandatory": true, "prompt": "Gmail UI 삭제·휴지통·백업·수신자 사본과 운영자 보유기간을 어떻게 분리하는가?", "serviceIds": [ "grocery", "runway", "care" ], "status": "pending-external-review", "determination": null, "conclusion": null, "limitations": "공식 공개자료와 내부 redacted 요약만 준비됨. 실제 계정·provider 답변·전문가 판단은 없음.", "sourceIds": [ "SRC-GOOGLE-RETENTION", "SRC-GMAIL-DELETE" ], "evidenceRefs": [ "ERH-TEST-GROCERY-V10", "ERH-TEST-RUNWAY-V10", "ERH-TEST-CARE-V10", "ERH-DIFF-GROCERY-V11", "ERH-DIFF-RUNWAY-V11", "ERH-DIFF-CARE-V11", "ERH-DIFF-GROCERY-V12", "ERH-DIFF-RUNWAY-V12", "ERH-DIFF-CARE-V12", "ERH-DIFF-GROCERY-V13", "ERH-DIFF-RUNWAY-V13", "ERH-DIFF-CARE-V13" ], "nonApplicabilityBasis": null }, { "id": "SITES-01", "track": "sites", "mandatory": true, "prompt": "Sites Terms·개인용 DPA가 현재 계정과 owner-only 사이트에 적용되는가?", "serviceIds": [ "grocery", "runway", "care" ], "status": "pending-external-review", "determination": null, "conclusion": null, "limitations": "공식 공개자료와 내부 redacted 요약만 준비됨. 실제 계정·provider 답변·전문가 판단은 없음.", "sourceIds": [ "SRC-SITES-TERMS", "SRC-SITES-DPA", "SRC-SITES-DOCS" ], "evidenceRefs": [ "ERH-SNAPSHOT-GROCERY-V10", "ERH-SNAPSHOT-RUNWAY-V10", "ERH-SNAPSHOT-CARE-V10", "ERH-DIFF-GROCERY-V11", "ERH-DIFF-RUNWAY-V11", "ERH-DIFF-CARE-V11", "ERH-DIFF-GROCERY-V12", "ERH-DIFF-RUNWAY-V12", "ERH-DIFF-CARE-V12", "ERH-DIFF-GROCERY-V13", "ERH-DIFF-RUNWAY-V13", "ERH-DIFF-CARE-V13" ], "nonApplicabilityBasis": null }, { "id": "SITES-02", "track": "sites", "mandatory": true, "prompt": "Hosted Data의 실제 항목과 역할은 무엇인가? 계약상 processor 표현과 한국법상 분류를 분리한다.", "serviceIds": [ "grocery", "runway", "care" ], "status": "pending-external-review", "determination": null, "conclusion": null, "limitations": "공식 공개자료와 내부 redacted 요약만 준비됨. 실제 계정·provider 답변·전문가 판단은 없음.", "sourceIds": [ "SRC-SITES-TERMS", "SRC-SITES-DPA", "SRC-OPENAI-PRIVACY-KR" ], "evidenceRefs": [ "ERH-RISK-GROCERY-V10", "ERH-RISK-RUNWAY-V10", "ERH-RISK-CARE-V10", "ERH-DIFF-GROCERY-V11", "ERH-DIFF-RUNWAY-V11", "ERH-DIFF-CARE-V11", "ERH-DIFF-GROCERY-V12", "ERH-DIFF-RUNWAY-V12", "ERH-DIFF-CARE-V12", "ERH-DIFF-GROCERY-V13", "ERH-DIFF-RUNWAY-V13", "ERH-DIFF-CARE-V13" ], "nonApplicabilityBasis": null }, { "id": "SITES-03", "track": "sites", "mandatory": true, "prompt": "보관·내보내기·삭제·서비스 종료·하위처리자·국외처리·사고지원·민감정보 제한은 무엇인가?", "serviceIds": [ "grocery", "runway", "care" ], "status": "pending-external-review", "determination": null, "conclusion": null, "limitations": "공식 공개자료와 내부 redacted 요약만 준비됨. 실제 계정·provider 답변·전문가 판단은 없음.", "sourceIds": [ "SRC-SITES-DPA", "SRC-OPENAI-SUBPROCESSORS", "SRC-OPENAI-PRIVACY-KR" ], "evidenceRefs": [ "ERH-TEST-GROCERY-V10", "ERH-TEST-RUNWAY-V10", "ERH-TEST-CARE-V10", "ERH-DIFF-GROCERY-V11", "ERH-DIFF-RUNWAY-V11", "ERH-DIFF-CARE-V11", "ERH-DIFF-GROCERY-V12", "ERH-DIFF-RUNWAY-V12", "ERH-DIFF-CARE-V12", "ERH-DIFF-GROCERY-V13", "ERH-DIFF-RUNWAY-V13", "ERH-DIFF-CARE-V13" ], "nonApplicabilityBasis": null } ], "sourceManifest": [ { "id": "SRC-PIPA", "provider": "대한민국", "title": "개인정보 보호법", "url": "https://www.law.go.kr/LSW/lsInfoP.do?lsiSeq=270351", "status": "current", "documentDate": null, "dateKind": "not-specified", "retrievedAt": "2026-07-12", "validUntilExclusive": null, "revalidateAfter": "2026-10-12", "sha256": "sha256:454b16714a6f4c17dd5be739afced37b0cbd08f0b532bc03403c8b91684d6b80", "digestScope": "source-id-descriptor-not-page-content" }, { "id": "SRC-PIPA-ENFORCEMENT", "provider": "대한민국", "title": "개인정보 보호법 시행령", "url": "https://www.law.go.kr/LSW/lsInfoP.do?lsId=011468", "status": "current", "documentDate": null, "dateKind": "not-specified", "retrievedAt": "2026-07-12", "validUntilExclusive": null, "revalidateAfter": "2026-10-12", "sha256": "sha256:3f1df269d6289f73d2259fd759ce0c941b362e74b6927b46f7e93cbb68540026", "digestScope": "source-id-descriptor-not-page-content" }, { "id": "SRC-PIPC-2026-GUIDE", "provider": "개인정보보호위원회", "title": "2026 개인정보 처리방침 작성지침", "url": "https://www.pipc.go.kr/np/cop/bbs/selectBoardArticle.do?bbsId=BS217&mCode=&nttId=12018", "status": "current", "documentDate": "2026-04-22", "dateKind": "published", "retrievedAt": "2026-07-12", "validUntilExclusive": null, "revalidateAfter": "2026-10-12", "sha256": "sha256:1139459d6f11658d3d04c34bcdd09156384664274e0737c5f8267eece35ce5b1", "digestScope": "source-id-descriptor-not-page-content" }, { "id": "SRC-GOOGLE-TERMS-CURRENT", "provider": "Google", "title": "현행 한국 Google 서비스 약관", "url": "https://policies.google.com/terms?gl=kr&hl=ko", "status": "current", "documentDate": "2024-05-22", "dateKind": "effective", "retrievedAt": "2026-07-12", "validUntilExclusive": "2026-07-30", "revalidateAfter": "2026-07-30", "sha256": "sha256:d724e5f7a430fccc3d15e626ccc1e7a53e7129d3c3cb6741721ed072591d0b35", "digestScope": "source-id-descriptor-not-page-content" }, { "id": "SRC-GOOGLE-TERMS-UPCOMING", "provider": "Google", "title": "예정 한국 Google 서비스 약관", "url": "https://policies.google.com/terms/update?gl=kr&hl=ko", "status": "upcoming", "documentDate": "2026-07-30", "dateKind": "effective", "retrievedAt": "2026-07-12", "validUntilExclusive": null, "revalidateAfter": "2026-07-30", "sha256": "sha256:c8ccedfcb4612a1d931f50a60a14104577eeca826c3143c652e081cd7512d745", "digestScope": "source-id-descriptor-not-page-content" }, { "id": "SRC-GOOGLE-PRIVACY", "provider": "Google", "title": "Google 개인정보처리방침", "url": "https://policies.google.com/privacy?hl=ko", "status": "current", "documentDate": null, "dateKind": "not-specified", "retrievedAt": "2026-07-12", "validUntilExclusive": null, "revalidateAfter": "2026-10-12", "sha256": "sha256:3419046eb6a1467b83c9d03e879f706ac8d86c592b4c0e6d1e0ac4db73450a3b", "digestScope": "source-id-descriptor-not-page-content" }, { "id": "SRC-GOOGLE-RETENTION", "provider": "Google", "title": "Google 데이터 보관·삭제", "url": "https://policies.google.com/technologies/retention?hl=ko", "status": "current", "documentDate": null, "dateKind": "not-specified", "retrievedAt": "2026-07-12", "validUntilExclusive": null, "revalidateAfter": "2026-10-12", "sha256": "sha256:55de75e5718e23345e83126b4e61184780b5a61ea45146a0bc802782efe958df", "digestScope": "source-id-descriptor-not-page-content" }, { "id": "SRC-GMAIL-DELETE", "provider": "Google", "title": "Gmail 메시지 삭제", "url": "https://support.google.com/mail/answer/7401?hl=ko", "status": "current", "documentDate": null, "dateKind": "not-specified", "retrievedAt": "2026-07-12", "validUntilExclusive": null, "revalidateAfter": "2026-10-12", "sha256": "sha256:c4969ad34d9d8a74e3b0c72808db3b326590f8456ea8174d3d3402f655888eea", "digestScope": "source-id-descriptor-not-page-content" }, { "id": "SRC-GOOGLE-SECURITY", "provider": "Google", "title": "Google 보안진단", "url": "https://support.google.com/accounts/answer/46526?hl=ko", "status": "current", "documentDate": null, "dateKind": "not-specified", "retrievedAt": "2026-07-12", "validUntilExclusive": null, "revalidateAfter": "2026-10-12", "sha256": "sha256:906b2637f05e1c46cf1fedcb889c6e14ac56411217dc59a77508a3471189bee9", "digestScope": "source-id-descriptor-not-page-content" }, { "id": "SRC-SITES-TERMS", "provider": "OpenAI", "title": "ChatGPT Sites Terms", "url": "https://openai.com/policies/chatgpt-sites-terms/", "status": "current", "documentDate": "2026-07-09", "dateKind": "updated", "retrievedAt": "2026-07-12", "validUntilExclusive": null, "revalidateAfter": "2026-08-09", "sha256": "sha256:1f2636d751bf1fd777ecf81fa70f108e478842d29a3c5b99dfbbbee70cee60dd", "digestScope": "source-id-descriptor-not-page-content" }, { "id": "SRC-SITES-DPA", "provider": "OpenAI", "title": "ChatGPT Sites Data Processing Addendum for Individual Services", "url": "https://openai.com/policies/chatgpt-sites-data-processing-addendum/", "status": "current", "documentDate": "2026-07-09", "dateKind": "published", "retrievedAt": "2026-07-12", "validUntilExclusive": null, "revalidateAfter": "2026-08-09", "sha256": "sha256:42bc0709209839c0906f3288a54b95c5c9914ee5c6bbd9225859448b0037f93f", "digestScope": "source-id-descriptor-not-page-content" }, { "id": "SRC-SITES-DOCS", "provider": "OpenAI", "title": "Sites 공식 문서", "url": "https://learn.chatgpt.com/docs/sites", "status": "current", "documentDate": null, "dateKind": "not-specified", "retrievedAt": "2026-07-12", "validUntilExclusive": null, "revalidateAfter": "2026-08-09", "sha256": "sha256:b903e25cc1354ee3d54b0b55fb912b3ca5abb0c1fc7bc7375b60a2d660b84e85", "digestScope": "source-id-descriptor-not-page-content" }, { "id": "SRC-OPENAI-PRIVACY-KR", "provider": "OpenAI", "title": "OpenAI 개인정보처리방침", "url": "https://openai.com/policies/privacy-policy/", "status": "current", "documentDate": null, "dateKind": "not-specified", "retrievedAt": "2026-07-12", "validUntilExclusive": null, "revalidateAfter": "2026-10-12", "sha256": "sha256:6a341d818da9f3addfd705a5370db0b7c4c50acb9d94674f63c8d21c3dff7cfe", "digestScope": "source-id-descriptor-not-page-content" }, { "id": "SRC-OPENAI-SUBPROCESSORS", "provider": "OpenAI", "title": "OpenAI 하위처리자 목록", "url": "https://platform.openai.com/subprocessors", "status": "current", "documentDate": null, "dateKind": "not-specified", "retrievedAt": "2026-07-12", "validUntilExclusive": null, "revalidateAfter": "2026-08-09", "sha256": "sha256:4be9ea66e15a1cacc28bd23a11fb263acac09406d011b231b2457ec430f88575", "digestScope": "source-id-descriptor-not-page-content" }, { "id": "SRC-OMNI-TERMS", "provider": "Omnilude", "title": "Omnilude 이용약관", "url": "https://omnilude.com/ko/guide/policy/terms", "status": "current", "documentDate": null, "dateKind": "not-specified", "retrievedAt": "2026-07-12", "validUntilExclusive": null, "revalidateAfter": "2026-10-12", "sha256": "sha256:b35c40e513af3a8ea3ad6b361dcdaecc7d512f1cdce71b4900235ce20af62258", "digestScope": "source-id-descriptor-not-page-content" }, { "id": "SRC-OMNI-PRIVACY", "provider": "Omnilude", "title": "Omnilude 개인정보 처리방침", "url": "https://omnilude.com/ko/guide/policy/privacy", "status": "current", "documentDate": null, "dateKind": "not-specified", "retrievedAt": "2026-07-12", "validUntilExclusive": null, "revalidateAfter": "2026-10-12", "sha256": "sha256:e4280aa8bca49711d0385f14c17ee8e3115aaa27277ed0ca9158c37517e7b062", "digestScope": "source-id-descriptor-not-page-content" } ], "evidenceManifest": [ { "id": "ERH-SNAPSHOT-GROCERY-V10", "serviceId": "grocery", "artifactKind": "redacted-governance-snapshot", "logicalLocation": "external-review-handoff.json#evidence=ERH-SNAPSHOT-GROCERY-V10", "sha256": "sha256:38111603762e7faaa2bc2d971aa44be3b6512d8143f228c8fc2eea818864efb0", "digestScope": "JSON.stringify(payload)-UTF8", "containsSecrets": false, "containsPersonalData": false, "publicSafe": true, "sourceIds": [ "SRC-PIPA", "SRC-SITES-DPA" ], "payload": { "schema": "redacted-governance-snapshot/v1", "serviceId": "grocery", "baselineVersion": "v10", "policyVersion": "v1.1", "accessMode": "owner-only", "boundaries": [ "browser-local", "user-export", "rights-gmail", "kamis-server-query", "sites-hosted-data" ], "gates": { "privacyRiskDecision": "NO-GO", "gmailLifecycle": "draft-unapproved", "gmailSecurity": "not-checked", "liveSyntheticGmail": "not-run", "legalReview": "not-started", "sitesKoreanLegalClassification": "unresolved", "publicExpansionAllowed": false } } }, { "id": "ERH-TEST-GROCERY-V10", "serviceId": "grocery", "artifactKind": "verification-summary", "logicalLocation": "external-review-handoff.json#evidence=ERH-TEST-GROCERY-V10", "sha256": "sha256:34aa20c82757060058073438401f5e8aeafe3da791d980ebbff4da8039af040d", "digestScope": "JSON.stringify(payload)-UTF8", "containsSecrets": false, "containsPersonalData": false, "publicSafe": true, "sourceIds": [ "SRC-PIPA-ENFORCEMENT" ], "payload": { "schema": "verification-summary/v1", "serviceId": "grocery", "baselineVersion": "v10", "testCount": 52, "typeScript": true, "lint": true, "build": true, "diffCheck": true, "verifiedAt": "2026-07-12" } }, { "id": "ERH-RISK-GROCERY-V10", "serviceId": "grocery", "artifactKind": "risk-summary", "logicalLocation": "external-review-handoff.json#evidence=ERH-RISK-GROCERY-V10", "sha256": "sha256:40f7accc4cdafd9570d4b20ec950ab57a44d87504d20551b4bc8e123955dfe8c", "digestScope": "JSON.stringify(payload)-UTF8", "containsSecrets": false, "containsPersonalData": false, "publicSafe": true, "sourceIds": [ "SRC-PIPA", "SRC-GOOGLE-PRIVACY", "SRC-SITES-DPA" ], "payload": { "schema": "risk-summary/v1", "serviceId": "grocery", "assessmentKind": "voluntary-not-statutory-impact-assessment", "riskCount": 6, "highResidualCount": 6, "decision": "NO-GO", "legalReview": "not-started" } }, { "id": "ERH-DIFF-GROCERY-V11", "serviceId": "grocery", "artifactKind": "policy-change-diff", "logicalLocation": "external-review-handoff.json#evidence=ERH-DIFF-GROCERY-V11", "sha256": "sha256:51a153ec8fb7ed901322cfa961221d3665679f9a05a3d4f36a0a375cf4924772", "digestScope": "JSON.stringify(payload)-UTF8", "containsSecrets": false, "containsPersonalData": false, "publicSafe": true, "sourceIds": [ "SRC-PIPA", "SRC-SITES-TERMS", "SRC-SITES-DPA" ], "payload": { "schema": "policy-change-diff/v1", "serviceId": "grocery", "fromVersion": "v1.1", "toVersion": "v1.2", "sourceBaselineCommit": "5a148729b96536456fa2dc656e7ce8e7f78a2c6c", "candidateMaterialCommit": "30b5c0c0dd01ca9715eb1a5dffd1ee8de728bd09", "changes": [ "v10-change-control-and-synthetic-continuity-evidence", "sites-terms-dpa-and-external-review-handoff", "runtime-freshness-and-embedded-redacted-evidence" ], "externalReviewResult": "not-started", "operationalReleaseResult": "blocked", "publicExpansionAllowed": false } }, { "id": "ERH-DIFF-GROCERY-V12", "serviceId": "grocery", "artifactKind": "control-hardening-diff", "logicalLocation": "external-review-handoff.json#evidence=ERH-DIFF-GROCERY-V12", "sha256": "sha256:f86fd9543344ca1d27cebe6b28ca4c0fd1456f7da2e7b5bb6babfb85008cb23b", "digestScope": "JSON.stringify(payload)-UTF8", "containsSecrets": false, "containsPersonalData": false, "publicSafe": true, "sourceIds": [ "SRC-GOOGLE-SECURITY", "SRC-SITES-TERMS", "SRC-SITES-DPA" ], "payload": { "schema": "control-hardening-diff/v1", "serviceId": "grocery", "fromVersion": "v11", "toVersion": "v12", "controlBaselineCommit": "adb3d6ea42b88021bd2a1c758c7eed7ebd04e7e5", "candidateMaterialCommit": "3b9a76d12358bc99f14eff82211a0a7437ff4efe", "changes": [ "gmail-account-security-fail-closed", "external-review-return-envelope", "sites-at-check-rollback-observation" ], "externalReviewResult": "not-started", "externalReviewVerification": "verification-required", "operationalReleaseResult": "blocked", "publicExpansionAllowed": false } }, { "id": "ERH-DIFF-GROCERY-V13", "serviceId": "grocery", "artifactKind": "local-return-validation-diff", "logicalLocation": "external-review-handoff.json#evidence=ERH-DIFF-GROCERY-V13", "sha256": "sha256:5764ffd4db1a43d10dcbf96c700f323de21967f684d6573b81ad128fdb861a2b", "digestScope": "JSON.stringify(payload)-UTF8", "containsSecrets": false, "containsPersonalData": false, "publicSafe": true, "sourceIds": [ "SRC-PIPA", "SRC-SITES-DPA" ], "payload": { "schema": "local-return-validation-diff/v1", "serviceId": "grocery", "fromVersion": "v12", "toVersion": "v13", "baselineCommit": "6b3f0be3c01e16b87cb62a5153244bfc4aaecec5", "candidateMaterialCommit": "7e133321f499a224ddbb472a78702aacce0012ef", "browserProcessingBoundary": { "input": "user-selected-redacted-return-json", "maximumBytes": 65536, "validation": "memory-only-structure-and-freshness-check", "clockBasis": "local-system-untrusted-one-shot", "upload": false, "network": false, "storage": false, "persistence": false, "inputLog": false, "rawDisplay": false, "fileNameDisplay": false, "discardOn": [ "reset", "new-selection", "unmount" ], "originalFileDeletion": "outside-app-scope" }, "offlineCliBoundary": { "input": "regular-file-only", "output": "redacted-summary-only", "unverifiedExitCode": 3, "network": false, "persistence": false }, "changes": [ "browser-memory-return-validation", "offline-cli-redacted-summary", "no-network-no-persistence" ], "externalReviewResult": "not-started", "signatureVerification": "not-verified", "qualificationVerification": "not-verified", "operationalReleaseResult": "blocked", "publicExpansionAllowed": false } }, { "id": "ERH-SNAPSHOT-RUNWAY-V10", "serviceId": "runway", "artifactKind": "redacted-governance-snapshot", "logicalLocation": "external-review-handoff.json#evidence=ERH-SNAPSHOT-RUNWAY-V10", "sha256": "sha256:1853e1e28626048dd4b62cdf61ebdbfea27c2603fb86254ec2a299eaa617de85", "digestScope": "JSON.stringify(payload)-UTF8", "containsSecrets": false, "containsPersonalData": false, "publicSafe": true, "sourceIds": [ "SRC-PIPA", "SRC-SITES-DPA" ], "payload": { "schema": "redacted-governance-snapshot/v1", "serviceId": "runway", "baselineVersion": "v10", "policyVersion": "v1.1", "accessMode": "owner-only", "boundaries": [ "browser-local", "user-export", "rights-gmail", "fixture-provider-links", "sites-hosted-data" ], "gates": { "privacyRiskDecision": "NO-GO", "gmailLifecycle": "draft-unapproved", "gmailSecurity": "not-checked", "liveSyntheticGmail": "not-run", "legalReview": "not-started", "sitesKoreanLegalClassification": "unresolved", "publicExpansionAllowed": false } } }, { "id": "ERH-TEST-RUNWAY-V10", "serviceId": "runway", "artifactKind": "verification-summary", "logicalLocation": "external-review-handoff.json#evidence=ERH-TEST-RUNWAY-V10", "sha256": "sha256:58df64a71b14cf8c721f0f81e4cedeecc6b46aef7a19c0f3a169d215a79b81be", "digestScope": "JSON.stringify(payload)-UTF8", "containsSecrets": false, "containsPersonalData": false, "publicSafe": true, "sourceIds": [ "SRC-PIPA-ENFORCEMENT" ], "payload": { "schema": "verification-summary/v1", "serviceId": "runway", "baselineVersion": "v10", "testCount": 55, "typeScript": true, "lint": true, "build": true, "diffCheck": true, "verifiedAt": "2026-07-12" } }, { "id": "ERH-RISK-RUNWAY-V10", "serviceId": "runway", "artifactKind": "risk-summary", "logicalLocation": "external-review-handoff.json#evidence=ERH-RISK-RUNWAY-V10", "sha256": "sha256:6d6d66d92ee9ba847ab8389134f08e79717d126f02c838f511d989c724ed3091", "digestScope": "JSON.stringify(payload)-UTF8", "containsSecrets": false, "containsPersonalData": false, "publicSafe": true, "sourceIds": [ "SRC-PIPA", "SRC-GOOGLE-PRIVACY", "SRC-SITES-DPA" ], "payload": { "schema": "risk-summary/v1", "serviceId": "runway", "assessmentKind": "voluntary-not-statutory-impact-assessment", "riskCount": 6, "highResidualCount": 6, "decision": "NO-GO", "legalReview": "not-started" } }, { "id": "ERH-DIFF-RUNWAY-V11", "serviceId": "runway", "artifactKind": "policy-change-diff", "logicalLocation": "external-review-handoff.json#evidence=ERH-DIFF-RUNWAY-V11", "sha256": "sha256:f3a67b781b8189ea1097a8bb35cf664b02ff42f71bf8d2047539190ae66a4b7f", "digestScope": "JSON.stringify(payload)-UTF8", "containsSecrets": false, "containsPersonalData": false, "publicSafe": true, "sourceIds": [ "SRC-PIPA", "SRC-SITES-TERMS", "SRC-SITES-DPA" ], "payload": { "schema": "policy-change-diff/v1", "serviceId": "runway", "fromVersion": "v1.1", "toVersion": "v1.2", "sourceBaselineCommit": "aae417fd9b4783fd0dace3d631af2c6f29d633da", "candidateMaterialCommit": "8b9bb95519543ffc798316e4d1853a0c5011f0ed", "changes": [ "v10-change-control-and-synthetic-continuity-evidence", "sites-terms-dpa-and-external-review-handoff", "runtime-freshness-and-embedded-redacted-evidence" ], "externalReviewResult": "not-started", "operationalReleaseResult": "blocked", "publicExpansionAllowed": false } }, { "id": "ERH-DIFF-RUNWAY-V12", "serviceId": "runway", "artifactKind": "control-hardening-diff", "logicalLocation": "external-review-handoff.json#evidence=ERH-DIFF-RUNWAY-V12", "sha256": "sha256:a3274a528fb984c2ffec14ff0a11da7f70db5228b1063506dd286cfd2a4b9ab1", "digestScope": "JSON.stringify(payload)-UTF8", "containsSecrets": false, "containsPersonalData": false, "publicSafe": true, "sourceIds": [ "SRC-GOOGLE-SECURITY", "SRC-SITES-TERMS", "SRC-SITES-DPA" ], "payload": { "schema": "control-hardening-diff/v1", "serviceId": "runway", "fromVersion": "v11", "toVersion": "v12", "controlBaselineCommit": "04f861154108657d7845a1fe128fa69761a0c91f", "candidateMaterialCommit": "d5f5fec39e51654aa8b82c7e4cddfc9c0160587b", "changes": [ "gmail-account-security-fail-closed", "external-review-return-envelope", "sites-at-check-rollback-observation" ], "externalReviewResult": "not-started", "externalReviewVerification": "verification-required", "operationalReleaseResult": "blocked", "publicExpansionAllowed": false } }, { "id": "ERH-DIFF-RUNWAY-V13", "serviceId": "runway", "artifactKind": "local-return-validation-diff", "logicalLocation": "external-review-handoff.json#evidence=ERH-DIFF-RUNWAY-V13", "sha256": "sha256:3af1271d7a8aa3c1e904a269b6651b111da209b9152263004d689bb457279414", "digestScope": "JSON.stringify(payload)-UTF8", "containsSecrets": false, "containsPersonalData": false, "publicSafe": true, "sourceIds": [ "SRC-PIPA", "SRC-SITES-DPA" ], "payload": { "schema": "local-return-validation-diff/v1", "serviceId": "runway", "fromVersion": "v12", "toVersion": "v13", "baselineCommit": "36aafeb655a659304973b76fd3139072e4468048", "candidateMaterialCommit": "62e2118bb768b373336a6ec9f6832fb674fc51a7", "browserProcessingBoundary": { "input": "user-selected-redacted-return-json", "maximumBytes": 65536, "validation": "memory-only-structure-and-freshness-check", "clockBasis": "local-system-untrusted-one-shot", "upload": false, "network": false, "storage": false, "persistence": false, "inputLog": false, "rawDisplay": false, "fileNameDisplay": false, "discardOn": [ "reset", "new-selection", "unmount" ], "originalFileDeletion": "outside-app-scope" }, "offlineCliBoundary": { "input": "regular-file-only", "output": "redacted-summary-only", "unverifiedExitCode": 3, "network": false, "persistence": false }, "changes": [ "browser-memory-return-validation", "offline-cli-redacted-summary", "no-network-no-persistence" ], "externalReviewResult": "not-started", "signatureVerification": "not-verified", "qualificationVerification": "not-verified", "operationalReleaseResult": "blocked", "publicExpansionAllowed": false } }, { "id": "ERH-SNAPSHOT-CARE-V10", "serviceId": "care", "artifactKind": "redacted-governance-snapshot", "logicalLocation": "external-review-handoff.json#evidence=ERH-SNAPSHOT-CARE-V10", "sha256": "sha256:52d9e3dd45c1a5bd4ed476af535f2c974a34d432e2671b2f01b1e21a1f23ea2d", "digestScope": "JSON.stringify(payload)-UTF8", "containsSecrets": false, "containsPersonalData": false, "publicSafe": true, "sourceIds": [ "SRC-PIPA", "SRC-SITES-DPA" ], "payload": { "schema": "redacted-governance-snapshot/v1", "serviceId": "care", "baselineVersion": "v10", "policyVersion": "v1.1", "accessMode": "owner-only", "boundaries": [ "browser-local-workspace", "encrypted-backup-export", "rights-gmail", "external-app-handoff", "sites-hosted-data" ], "gates": { "privacyRiskDecision": "NO-GO", "gmailLifecycle": "draft-unapproved", "gmailSecurity": "not-checked", "liveSyntheticGmail": "not-run", "legalReview": "not-started", "sitesKoreanLegalClassification": "unresolved", "publicExpansionAllowed": false } } }, { "id": "ERH-TEST-CARE-V10", "serviceId": "care", "artifactKind": "verification-summary", "logicalLocation": "external-review-handoff.json#evidence=ERH-TEST-CARE-V10", "sha256": "sha256:c16d2e00a8f55decd83ba374c42fba1fa786ac259bdbec55c7df6684e0ff743a", "digestScope": "JSON.stringify(payload)-UTF8", "containsSecrets": false, "containsPersonalData": false, "publicSafe": true, "sourceIds": [ "SRC-PIPA-ENFORCEMENT" ], "payload": { "schema": "verification-summary/v1", "serviceId": "care", "baselineVersion": "v10", "testCount": 71, "typeScript": true, "lint": true, "build": true, "diffCheck": true, "verifiedAt": "2026-07-12" } }, { "id": "ERH-RISK-CARE-V10", "serviceId": "care", "artifactKind": "risk-summary", "logicalLocation": "external-review-handoff.json#evidence=ERH-RISK-CARE-V10", "sha256": "sha256:a6676bd97805797e99569de0f53ef4ab44e1514412468cedd54b27c6a3affe4a", "digestScope": "JSON.stringify(payload)-UTF8", "containsSecrets": false, "containsPersonalData": false, "publicSafe": true, "sourceIds": [ "SRC-PIPA", "SRC-GOOGLE-PRIVACY", "SRC-SITES-DPA" ], "payload": { "schema": "risk-summary/v1", "serviceId": "care", "assessmentKind": "voluntary-not-statutory-impact-assessment", "riskCount": 6, "highResidualCount": 6, "decision": "NO-GO", "legalReview": "not-started" } }, { "id": "ERH-DIFF-CARE-V11", "serviceId": "care", "artifactKind": "policy-change-diff", "logicalLocation": "external-review-handoff.json#evidence=ERH-DIFF-CARE-V11", "sha256": "sha256:c757935ac926c14a7f8c70f5ba512cbe10d94dc08802fa09fa1246dc9473e8d8", "digestScope": "JSON.stringify(payload)-UTF8", "containsSecrets": false, "containsPersonalData": false, "publicSafe": true, "sourceIds": [ "SRC-PIPA", "SRC-SITES-TERMS", "SRC-SITES-DPA" ], "payload": { "schema": "policy-change-diff/v1", "serviceId": "care", "fromVersion": "v1.1", "toVersion": "v1.2", "sourceBaselineCommit": "403c3176a168184cd04bc7adf7e8caf7583348f2", "candidateMaterialCommit": "8f161eb2270d4c9f1bcf6da83589df58c089936c", "changes": [ "v10-change-control-and-synthetic-continuity-evidence", "sites-terms-dpa-and-external-review-handoff", "runtime-freshness-and-embedded-redacted-evidence" ], "externalReviewResult": "not-started", "operationalReleaseResult": "blocked", "publicExpansionAllowed": false } }, { "id": "ERH-DIFF-CARE-V12", "serviceId": "care", "artifactKind": "control-hardening-diff", "logicalLocation": "external-review-handoff.json#evidence=ERH-DIFF-CARE-V12", "sha256": "sha256:c3ca22db1dde3630df05911804644d426e61ab8f392f12e0e6d79a8527823fb7", "digestScope": "JSON.stringify(payload)-UTF8", "containsSecrets": false, "containsPersonalData": false, "publicSafe": true, "sourceIds": [ "SRC-GOOGLE-SECURITY", "SRC-SITES-TERMS", "SRC-SITES-DPA" ], "payload": { "schema": "control-hardening-diff/v1", "serviceId": "care", "fromVersion": "v11", "toVersion": "v12", "controlBaselineCommit": "c09c4cf8daf5e8571921c321b1b4bd0f79b754ef", "candidateMaterialCommit": "849ad225d6bc3f2624f69c15be09075969af3fa9", "changes": [ "gmail-account-security-fail-closed", "external-review-return-envelope", "sites-at-check-rollback-observation" ], "externalReviewResult": "not-started", "externalReviewVerification": "verification-required", "operationalReleaseResult": "blocked", "publicExpansionAllowed": false } }, { "id": "ERH-DIFF-CARE-V13", "serviceId": "care", "artifactKind": "local-return-validation-diff", "logicalLocation": "external-review-handoff.json#evidence=ERH-DIFF-CARE-V13", "sha256": "sha256:63c826bfa348af45c6c1b405f888982b0d223ceb8008b929af6370bad0a86ed9", "digestScope": "JSON.stringify(payload)-UTF8", "containsSecrets": false, "containsPersonalData": false, "publicSafe": true, "sourceIds": [ "SRC-PIPA", "SRC-SITES-DPA" ], "payload": { "schema": "local-return-validation-diff/v1", "serviceId": "care", "fromVersion": "v12", "toVersion": "v13", "baselineCommit": "d774d2cc893dfa0a4c736292a7f0dbb5087a33ff", "candidateMaterialCommit": "db7d46a32e141bd85c6024eee1ac73fd7bac7816", "browserProcessingBoundary": { "input": "user-selected-redacted-return-json", "maximumBytes": 65536, "validation": "memory-only-structure-and-freshness-check", "clockBasis": "local-system-untrusted-one-shot", "upload": false, "network": false, "storage": false, "persistence": false, "inputLog": false, "rawDisplay": false, "fileNameDisplay": false, "discardOn": [ "reset", "new-selection", "unmount" ], "originalFileDeletion": "outside-app-scope" }, "offlineCliBoundary": { "input": "regular-file-only", "output": "redacted-summary-only", "unverifiedExitCode": 3, "network": false, "persistence": false }, "changes": [ "browser-memory-return-validation", "offline-cli-redacted-summary", "no-network-no-persistence" ], "externalReviewResult": "not-started", "signatureVerification": "not-verified", "qualificationVerification": "not-verified", "operationalReleaseResult": "blocked", "publicExpansionAllowed": false } } ], "reviewerAttestations": [ { "track": "legal", "status": "not-started", "reviewerDisplayName": null, "reviewerQualification": null, "jurisdiction": null, "conflictDisclosure": null, "reviewedAt": null, "questionIds": [ "LEGAL-01", "LEGAL-02", "LEGAL-03", "LEGAL-04", "LEGAL-05", "LEGAL-06" ], "sourceIds": [ "SRC-PIPA", "SRC-PIPA-ENFORCEMENT", "SRC-PIPC-2026-GUIDE", "SRC-SITES-TERMS", "SRC-SITES-DPA" ], "evidenceRefs": [ "ERH-SNAPSHOT-GROCERY-V10", "ERH-SNAPSHOT-RUNWAY-V10", "ERH-SNAPSHOT-CARE-V10", "ERH-RISK-GROCERY-V10", "ERH-RISK-RUNWAY-V10", "ERH-RISK-CARE-V10", "ERH-DIFF-GROCERY-V11", "ERH-DIFF-RUNWAY-V11", "ERH-DIFF-CARE-V11", "ERH-DIFF-GROCERY-V12", "ERH-DIFF-RUNWAY-V12", "ERH-DIFF-CARE-V12", "ERH-DIFF-GROCERY-V13", "ERH-DIFF-RUNWAY-V13", "ERH-DIFF-CARE-V13" ], "declarations": [], "subjectDigest": null }, { "track": "gmail", "status": "not-started", "reviewerDisplayName": null, "reviewerQualification": null, "jurisdiction": null, "conflictDisclosure": null, "reviewedAt": null, "questionIds": [ "GMAIL-01", "GMAIL-02", "GMAIL-03" ], "sourceIds": [ "SRC-GOOGLE-TERMS-CURRENT", "SRC-GOOGLE-TERMS-UPCOMING", "SRC-GOOGLE-PRIVACY", "SRC-GOOGLE-RETENTION", "SRC-GMAIL-DELETE", "SRC-GOOGLE-SECURITY" ], "evidenceRefs": [ "ERH-TEST-GROCERY-V10", "ERH-TEST-RUNWAY-V10", "ERH-TEST-CARE-V10", "ERH-DIFF-GROCERY-V11", "ERH-DIFF-RUNWAY-V11", "ERH-DIFF-CARE-V11", "ERH-DIFF-GROCERY-V12", "ERH-DIFF-RUNWAY-V12", "ERH-DIFF-CARE-V12", "ERH-DIFF-GROCERY-V13", "ERH-DIFF-RUNWAY-V13", "ERH-DIFF-CARE-V13" ], "declarations": [], "subjectDigest": null }, { "track": "sites", "status": "not-started", "reviewerDisplayName": null, "reviewerQualification": null, "jurisdiction": null, "conflictDisclosure": null, "reviewedAt": null, "questionIds": [ "SITES-01", "SITES-02", "SITES-03" ], "sourceIds": [ "SRC-SITES-TERMS", "SRC-SITES-DPA", "SRC-SITES-DOCS", "SRC-OPENAI-PRIVACY-KR", "SRC-OPENAI-SUBPROCESSORS" ], "evidenceRefs": [ "ERH-SNAPSHOT-GROCERY-V10", "ERH-SNAPSHOT-RUNWAY-V10", "ERH-SNAPSHOT-CARE-V10", "ERH-DIFF-GROCERY-V11", "ERH-DIFF-RUNWAY-V11", "ERH-DIFF-CARE-V11", "ERH-DIFF-GROCERY-V12", "ERH-DIFF-RUNWAY-V12", "ERH-DIFF-CARE-V12", "ERH-DIFF-GROCERY-V13", "ERH-DIFF-RUNWAY-V13", "ERH-DIFF-CARE-V13" ], "declarations": [], "subjectDigest": null } ], "declaredStatus": { "internalPackResult": "ready-for-external-review", "externalReviewResult": "not-started", "operationalReleaseResult": "blocked" } }