The working A prototype: use its controls to test the build question.
Let people understand and control consent, access, correction, deletion, retention and downstream use.
RN conceived the question, structured the evidence boundaries, designed the experience, implemented the prototype and documented its limits.
This independent prototype demonstrates an approach; it is not a deployed client system, professional advice or proof of real-world outcomes.
Work through the controls with a situation of your own rather than the sample values. The tool responds to what you put in, so the useful output comes from real input, and everything is processed in your browser as you go. Any sample content you find already loaded is there to show the shape of a filled-in state, and you can clear it and start again at any point.
The build overview sets out the question, the purpose, the role and the evidence status in one place, and the public record behind it states what changed, what another person can reuse and what supports the system. If you want to judge how far this build should be trusted, the record is the page to read, not this one.
Consent & Data Rights Manager
Separate permission by purpose, preserve every state change, and route access, correction, deletion, retention, and downstream-use questions.
RIGHTS PATHS READY
1 active · 1 withheld or withdrawn · 0 valid session event(s)
SPECIFIC PURPOSE
Evaluate an application for the requested service
- Data
- Contact details and application evidence
- Recipient
- Authorized program review team only
- Retention
- Delete 90 days after final disposition unless a verified rule requires longer
- Downstream use
- No model training, sale, advertising, or unrelated reuse
- Evidence
- Synthetic initial permission record: FIX-023-PUR-01
Withdrawal changes future processing that relies on this permission. It does not itself decide deletion, another lawful basis, an exception, or a legal deadline.
Append-only permission events
No session event yet. The two synthetic initial states remain evidenced in their purpose records.
Boundary: this is a client-local product-control demonstration, not legal advice or a determination that consent is valid, a right applies, identity is verified, or a request must be fulfilled. Use no real personal data.