Skip to content

Question AUR 05

Luke Nathan Hayes edited this page Oct 20, 2026 · 3 revisions

AUR-05 How will a person's sharing choices travel with their records and AI work between a device, local hub and outside service?

Start here · Questions · Progress · People decide

Why this matters

People should understand who can use their information, where it goes and how a change of service affects their choices.

What to bring back

Set out the rules for original records, retrieved information, summaries, search aids and trained AI versions. Name purpose, destination, service operator, saved copies, expiry and exit arrangements. Check a denied transfer, changed permission, recovery and an attempted public answer using private material.

What we know so far

AI-generated potential answers

For discussion and review · research checked 2026-10-20. These are AI-generated options and transfer assessments. The user's request and research method identify the source of this work. The source catalogue states what the references establish. The decision and approval record retains its own status.

Attach understandable sharing choices to each record and derived item, naming purpose, recipient, copies, expiry and exit arrangements. Preview transfers between personal device, local hub and outside service. Track copies and AI derivatives explicitly, because withdrawing future access alone cannot recall information already received.

Selective access with a copy-and-purpose register

AI-generated adaptation of an existing pattern. Evaluate Solid-style selective access alongside an explicit record of exports, summaries and search indexes. Agree how each recipient handles expiry and deletion, and test the service provider's actual storage protections and recovery arrangements.

Research basis: Solid FAQ: personal data sharing, storage and copies.

An Aura checks a transfer before it happens

AI-generated future concept. Explore an assistant comparing a proposed transfer with the person's recorded choices and producing a plain-language preview. Restricted cultural material would follow its custodians' actual conditions; the assistant's interpretation would remain open to review.

Research basis: Solid FAQ: personal data sharing, storage and copies · NIST AI Risk Management Framework 1.0: core functions.

Examples and local differences

  • Solid FAQ: personal data sharing, storage and copies: AI transfer assessment: Selective access helps control new sharing, while copies already exported need separate treatment. Local difference to check: The network must also govern offline copies, AI summaries, training permissions and cultural authority across different recipients.

Evidence to bring back next

  • Attempt a denied transfer, withdraw access, recover a device and inspect previously created copies and indexes.
  • Use synthetic private material to test whether it appears in a public screen, answer, export or model-training path.

People and connected choices

Who reviews: Proposed personal-data custodian and Aura runtime lead (unconfirmed)

Connected questions: AUR-01, DAT-01, SW-04

Work state: open. Assigned person or AI assistant: Ready to be assigned.

Research and alternatives can move ahead while connected decisions develop. Before acting on a choice, check the people, evidence and approved scope in People decide.

Clone this wiki locally