feat(pattern): add Private Geospatial Attestation - #184
Open
mzf11125 wants to merge 3 commits into
Open
Conversation
…attern use-cases/private-supply-chain.md section 5 read 'Approach TBD'. This replaces it with three named architectures and a full approach card. Adds pattern-private-geospatial-attestation covering proof that a plot polygon does not intersect a committed deforestation layer without revealing coordinates, which is what EUDR Article 9 geolocation makes necessary from 30 December 2026. The pattern is maturity: concept, and states the reference-layer commitment as the load-bearing assumption rather than burying it: whoever publishes the layer defines ground truth, and a stale layer yields proofs that verify correctly and mean nothing. It also records that re-identification, not cryptography, is the practical limit for small producer populations. Also adds EUDR to the use case's regulatory drivers, which previously listed only pharma serialization (FMD, DSCSA). Note: depends on jurisdictions/eu-EUDR.md, so merge after that card.
7 tasks
5 tasks
Member
|
hey @mzf11125 thanks for this PR, however, we curate approaches ourselves. would it be possible to just include the |
Contributor
Author
|
Thanks @rymnc for the kind note. I am happy to keep only the pattern in this PR. I will drop the approach card and the use case rewrite and resolve the merge conflict next. |
Drop the approach card and use-case rewrite per review, and restack the changelog onto current unreleased entries. Co-authored-by: Cursor <cursoragent@cursor.com>
mzf11125
changed the title
Contributor
Author
|
CI all green, ready for review @rymnc |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What are you adding?
Description
Adds
patterns/pattern-private-geospatial-attestation.md. It covers proving that a plot polygon does not intersect a committed deforestation layer without revealing coordinates. That is what EUDR Article 9 makes necessary from 30 December 2026: latitude and longitude to six decimal digits, polygons above four hectares.Per review, the approach card and the Private Supply Chain use-case rewrite are no longer in this PR.
The pattern is
maturity: concept, not testnet. It is architecture, and there is no implementation behind it.The reference layer commitment is named as the load-bearing assumption in both
## Componentsand## Guarantees & threat model. Whoever publishes the deforestation layer defines ground truth, and a stale or manipulated layer yields proofs that verify correctly and mean nothing.context: both, withcontext_differentiationfilled in. Operator to competent authority is symmetric (trade secrecy). Smallholder to buyer is not: the producer plot polygon is simultaneously their livelihood and their personal data.CHANGELOG entry added under
[Unreleased], referencing this PR.Checklist