v1.1.1 — correct consent article citation, ECC drift, + verified coverage map#2
Open
imohad wants to merge 1 commit into
Open
v1.1.1 — correct consent article citation, ECC drift, + verified coverage map#2imohad wants to merge 1 commit into
imohad wants to merge 1 commit into
Conversation
… coverage map (v1.1.1) Independently verified PDPL article references against SDAIA's published text (multi-source, adversarially fact-checked deep-research pass, 2026-07-01). - BUG: PDPL-LB-03 cited "Art. 6 (affirmative consent)" — Art. 6 is the OPPOSITE (the no-consent exceptions). Corrected to Art. 5 (consent) + Art. 7 (not a precondition). LB-01 -> Arts. 5–7. Regression test added. - DRIFT: NCA ECC overlay used retired ECC-1:2018 clause "4.2.3.3" -> ECC-2:2024. - docs/regulatory-references.md: penalties pinned to Art. 35/36; cross-border safeguards trio + TRA + unpublished adequacy list. - NEW docs/coverage-map.md: PDPL requirements vs tool coverage + explicit gaps, verified refs; linked from README. Examples regenerated; rules-review date bumped to 2026-07-01. - Verified-correct (unchanged): Arts. 4&9, 4&18, 29, Impl. 24, 31+33. 33 tests passing. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Regulatory-accuracy pass driven by an independent, adversarially-verified deep-research check of the PDPL article mapping against SDAIA's published text (22 claims confirmed 3-0, 3 refuted).
Real bug fixed
PDPL-LB-03(pre-ticked consent) cited "Art. 6 (affirmative consent)" — but Art. 6 is the opposite: it lists the cases where processing needs no consent. Consent is Art. 5 (5(2) = withdrawal) + Art. 7 (consent not a precondition of service).PDPL-LB-03→ Art. 5 + Art. 7 ·PDPL-LB-01→ Arts. 5–7test_consent_control_cites_correct_pdpl_articles).Drift fixed
NCA ECC overlay cited the retired ECC-1:2018 clause
4.2.3.3; current standard is ECC-2:2024 (renumbered). Updated acrossentity_profiles.py, docs, and README.Docs
docs/coverage-map.md— what PDPL requires vs. what the tool checks, with verified article refs and an explicit gap list; linked from the README.docs/regulatory-references.md: penalties pinned to Art. 35 / Art. 36; cross-border safeguards trio (SCC / Binding Common Rules / Certificate) + transfer risk assessment + the still-unpublished adequacy list.Verified correct (no change needed)
Arts. 4 & 9 (access), Arts. 4 & 18 (erasure), Art. 29 (cross-border), Implementing Art. 24 (breach 72h), Art. 31 + Impl. 33 (RoPA).
Still a working map (flagged in coverage-map, not independently confirmed this pass)
Art. 12 (transparency), Art. 19 (security vs Art. 20 breach split), Art. 1 (sensitive-data definition), and the DPO/DPIA article numbers.
Examples regenerated · rules-review date → 2026-07-01 · 33 tests passing.
🤖 Generated with Claude Code