Showcase · NGO edition

Withdrawn consent stops every use

A household's data is processed on the basis of consent. When consent is withdrawn, every further action on the case is denied, including adding new records.

Recorded 2026-10-27Synthetic dataLedger verified · 37 entries3 of 3 responses signature-checked

The situation

Consent is often recorded once and never checked again by the tools that use the data.

What happened

The caseworker reviews the household's case with consent in place

Caseworker

✓ Signed by the core

ngo.triage on BEN-0001 · purpose triage · tier 1 question: "Why is the child missing school and what follow-up was agreed?"

OutcomeCompletedthread thr-402836e6038e4fd780aa

Search recordsSearchPassed✓ PII rescan681155d450…
Query: “Why is the child missing school and what follow-up was agreed?” · scope case · 1 passages
- [CN-1]CASE NOTE [CN-1] Case worker: Lio Brenn (synthetic) Home visit on 4 April 2099. The beneficiary reported missed school days because of caring duties at home. Follow-up agreed: referral to the education support programme and a further home visit in two weeks. Contact for the household: ⟦PHONE_SG:5e3daae4d2484330⟧.
Triage summaryModel draftPassed✓ PII rescan✓ Report verifierde099fa5a7…
- Drafted by the extractive fallback (quotes sources) because no approved model was configured
- Observed under R-OBS-01
Triage summary: - The beneficiary reported missed school days because of caring duties at home. [CN-1] - Follow-up agreed: referral to the education support programme and a further home visit in two weeks. [CN-1] Drafted only from the passages above; a person must check it before use.

Ledger entries for this thread (5)

#	Entry	Outcome	Rules	Basis	Actor	Hash
29	SAFR disposition	Allowed		Within mandate, below all thresholds	ngo-triage-agent	f589a04b50…
30	Documents read	Read		search (case)	cw	cc90675c22…
31	Result Gate	Passed		Result Gate: search	ngo-triage-agent	a54d63c48a…
32	SAFR disposition	Allowed, observed	R-OBS-01	R-OBS-01: model.triage_summary is flagged for monitoring	ngo-triage-agent	bda7e0c075…
33	Result Gate	Passed		Result Gate: model	ngo-triage-agent	1ed239fd76…

The household withdraws consent

Caseworker

✓ Signed by the core

POST /v1/cases/BEN-0001/ops/withdraw_consent { "reason": "Household asked for their data not to be used" }

Withdrawn: 1

Any further use of the household's records is refused

Caseworker

✓ Signed by the core

ngo.triage on BEN-0001 · purpose triage · tier 1 question: "school attendance"

OutcomeDeniedthread thr-14f59938c4ba42c6bd5e

Search recordsSearchDenied✓ PII rescan21e1c0b452…
R-NGO-01: data basis is consent and consent is withdrawn
- R-NGO-01: When the data basis is consent, withdrawn or expired consent stops every use.

Ledger entries for this thread (2)

#	Entry	Outcome	Rules	Basis	Actor	Hash
36	SAFR disposition	Denied	R-NGO-01	R-NGO-01: data basis is consent and consent is withdrawn	ngo-triage-agent	e0e9472573…
37	Result Gate	Denied		Result Gate: search	ngo-triage-agent	26256f083c…

The outcome

The triage that worked a moment earlier is denied under R-NGO-01, with the reason in the ledger.

Controls shown

R-NGO-01When the data basis is consent, it is checked on every action; withdrawn or expired consent denies.

Tier 1A case involving a child is always the most sensitive tier.

Next scenario: A safeguarding referral goes to the safeguarding lead only →