Trust governance guide

Governance vocabulary

Futbolier trust governance guide

Use this guide to keep Futbolier trust language precise. It separates authority, scope, evidence, integrity, standing, lineage, custody, and portability so no single verified label overstates what was proven.

Open trust stack overview Open registry guide Authority framework

Reliance boundaries

A reviewer should be able to explain why a record can be relied on without collapsing public communication, registry authority, certified evidence, and byte-level integrity into one generic status.

Avoid a single verified claim

Do not collapse issuer authority, evidence completeness, fingerprint integrity, archive standing, and dispute state into one green badge.

Certification scope is resolved, not assumed

A certificate or receipt becomes reliable only within the registry standing, jurisdiction, certification source, football rules context, and governance scope shown for the record.

Integrity is not institutional truth

A SHA-256 match proves submitted bytes equal an expected fingerprint. It does not prove every match fact, issuer authority, or process fairness.

Evidence coverage scopes reliance

A certified record should expose what evidence was represented, waived, pending, missing, or outside the certificate scope before reliance is accepted.

Canonical glossary

Use these terms consistently across receipts, registry reports, certificates, verifier receipts, bundles, and federation-facing review materials.

Term

Player Identity Record

Institutional meaning

Live identity profile for a player, team, or public entity, including display names, aliases, and federation IDs.

Authority boundary

Identity records support discovery and linkage; they do not certify match facts by themselves.

Term

Passport

Institutional meaning

Institutional credential attached to a player or entity that can link identity, eligibility, and certified archives.

Authority boundary

Passport standing depends on issuer authority, current credential status, privacy scope, and linked archive lineage.

Term

Public Trust Receipt

Institutional meaning

Human-readable public summary, QR, PDF, or URL that communicates trust signals and links deeper review layers.

Authority boundary

The receipt is not the source of authority; it should point to registry standing and certificate evidence.

Term

Certificate Registry

Institutional meaning

Issuer and standing resolver for issued public records, archive standing, stored fingerprints, and certification metadata.

Authority boundary

The registry resolves standing and authority; it does not independently prove every underlying match fact.

Term

Certified Evidence Record

Institutional meaning

Institutional-facing name for the technical certificate: the sealed evidence record behind a certified archive.

Authority boundary

Reliance still depends on registry standing, issuer authority, evidence coverage, and integrity checks.

Term

Canonical Payload

Institutional meaning

Stable JSON contract containing the sealed record bytes used for SHA-256 recomputation.

Authority boundary

The payload supports integrity review; it does not define who was allowed to certify the record.

Term

Integrity Verifier

Institutional meaning

Payload verifier that recomputes SHA-256 locally and compares against a trusted expected fingerprint when supplied.

Authority boundary

Verification proves byte equality or mismatch only; broader conclusions require registry and certificate context.

Term

Trust Bundle

Institutional meaning

Portable evidence package that carries adjacent trust artifacts, manifest hashes, signatures, and session evidence.

Authority boundary

The bundle transports evidence; each packaged artifact keeps its own authority boundary.

Term

Ruleset Version

Institutional meaning

Named policy or governance rule version applied when a record was certified, corrected, revoked, or reviewed.

Authority boundary

Historical reliance depends on knowing which rules were active at certification time.

Term	Institutional meaning	Authority boundary
Player Identity Record	Live identity profile for a player, team, or public entity, including display names, aliases, and federation IDs.	Identity records support discovery and linkage; they do not certify match facts by themselves.
Passport	Institutional credential attached to a player or entity that can link identity, eligibility, and certified archives.	Passport standing depends on issuer authority, current credential status, privacy scope, and linked archive lineage.
Public Trust Receipt	Human-readable public summary, QR, PDF, or URL that communicates trust signals and links deeper review layers.	The receipt is not the source of authority; it should point to registry standing and certificate evidence.
Certificate Registry	Issuer and standing resolver for issued public records, archive standing, stored fingerprints, and certification metadata.	The registry resolves standing and authority; it does not independently prove every underlying match fact.
Certified Evidence Record	Institutional-facing name for the technical certificate: the sealed evidence record behind a certified archive.	Reliance still depends on registry standing, issuer authority, evidence coverage, and integrity checks.
Canonical Payload	Stable JSON contract containing the sealed record bytes used for SHA-256 recomputation.	The payload supports integrity review; it does not define who was allowed to certify the record.
Integrity Verifier	Payload verifier that recomputes SHA-256 locally and compares against a trusted expected fingerprint when supplied.	Verification proves byte equality or mismatch only; broader conclusions require registry and certificate context.
Trust Bundle	Portable evidence package that carries adjacent trust artifacts, manifest hashes, signatures, and session evidence.	The bundle transports evidence; each packaged artifact keeps its own authority boundary.
Ruleset Version	Named policy or governance rule version applied when a record was certified, corrected, revoked, or reviewed.	Historical reliance depends on knowing which rules were active at certification time.

Multi-signal reliance panel

Formal review should expose distinct signals, including authority scope and custody, instead of presenting one undifferentiated trust score.

Signal

Registry standing

Reviewer question

Is this archive current, historical, revoked, disputed, or pending review?

Primary source

Certificate Registry and archive lineage.

Signal

Certification source

Reviewer question

Who certified the record, and under which jurisdiction and organization scope?

Primary source

Governance seal, certification metadata, registry issuer record.

Signal

Governance scope

Reviewer question

Under which sport, rules context, competition, geography, season, age, or gender scope does the record operate?

Primary source

Ruleset scope, competition governance metadata, registry issuer record, organization context.

Signal

Fingerprint integrity

Reviewer question

Do the stored and recomputed SHA-256 values match?

Primary source

Payload verifier, registry report, technical certificate.

Signal

Evidence coverage

Reviewer question

Which required sources were present, waived, pending, or missing before certification?

Primary source

Certified Evidence Record and evidence manifest.

Signal

Certification lineage

Reviewer question

Was this record superseded, corrected, archived, or linked to a newer official record?

Primary source

Registry lineage and certificate custody events.

Signal

Custody chain

Reviewer question

Who handled the record from creation through certification, review, export, and handoff?

Primary source

Custody events, audit trail, authority transitions, Trust Bundle transport history.

Signal

Dispute state

Reviewer question

Is a correction, appeal, eligibility question, or authority review open?

Primary source

Dispute record, registry standing, authority action log.

Signal

Ruleset version

Reviewer question

Which governance policy version controlled certification and later changes?

Primary source

Ruleset metadata recorded on the certificate or registry action.

Signal	Reviewer question	Primary source
Registry standing	Is this archive current, historical, revoked, disputed, or pending review?	Certificate Registry and archive lineage.
Certification source	Who certified the record, and under which jurisdiction and organization scope?	Governance seal, certification metadata, registry issuer record.
Governance scope	Under which sport, rules context, competition, geography, season, age, or gender scope does the record operate?	Ruleset scope, competition governance metadata, registry issuer record, organization context.
Fingerprint integrity	Do the stored and recomputed SHA-256 values match?	Payload verifier, registry report, technical certificate.
Evidence coverage	Which required sources were present, waived, pending, or missing before certification?	Certified Evidence Record and evidence manifest.
Certification lineage	Was this record superseded, corrected, archived, or linked to a newer official record?	Registry lineage and certificate custody events.
Custody chain	Who handled the record from creation through certification, review, export, and handoff?	Custody events, audit trail, authority transitions, Trust Bundle transport history.
Dispute state	Is a correction, appeal, eligibility question, or authority review open?	Dispute record, registry standing, authority action log.
Ruleset version	Which governance policy version controlled certification and later changes?	Ruleset metadata recorded on the certificate or registry action.

Registry standing framework

Standing labels should describe authoritative reliance without implying misconduct unless an authorized adjudication says so.

Standing

Draft

Meaning

The record is being prepared but has not been certified by an authorized issuer.

Review treatment

Do not rely publicly; treat as internal preparation until certification is complete.

Standing

Active

Meaning

The record is the current operative public archive in good standing under the registry.

Review treatment

Use as current evidence, subject to authority, evidence, and integrity checks.

Standing

Superseded

Meaning

A newer certified archive replaced this record as current.

Review treatment

Retain as historical evidence and inspect the current archive before operational reliance.

Standing

Expired

Meaning

The record or credential reached the end of its validity window.

Review treatment

Retain historically and require renewal or a current certificate before operational reliance.

Standing

Corrected

Meaning

A later certificate corrected a clerical, identity, eligibility, disciplinary, or governance issue.

Review treatment

Review both the original and corrective certificate lineage.

Standing

Revoked

Meaning

An authorized issuer or registry authority withdrew reliance on the record.

Review treatment

Do not rely operationally without reviewing reason, authority, timestamp, and appeal status.

Standing

Withdrawn

Meaning

The issuer removed the record before certification completion or public reliance.

Review treatment

Treat as unavailable for reliance and preserve withdrawal authority, timestamp, and reason.

Standing

Rejected

Meaning

The record failed authority review, evidence review, eligibility review, or policy review.

Review treatment

Do not rely; preserve rejection reason, review authority, and any appeal path.

Standing

Suspended

Meaning

Reliance is temporarily paused while authority review or policy checks continue.

Review treatment

Treat as unavailable for current reliance until the registry resolves standing.

Standing

Disputed

Meaning

A formal challenge, appeal, or correction request is attached to the record.

Review treatment

Preserve the dispute file and avoid final conclusions until the authority decision is recorded.

Standing

Pending authority review

Meaning

The record exists, but issuer, evidence, privacy, or governance review is not complete.

Review treatment

Use neutral language and escalate to the governing authority before relying on it.

Standing

Archived

Meaning

The record is retained for historical or audit access, but is not presented as current.

Review treatment

Preserve as historical context and verify whether a current operative record exists.

Standing	Meaning	Review treatment
Draft	The record is being prepared but has not been certified by an authorized issuer.	Do not rely publicly; treat as internal preparation until certification is complete.
Active	The record is the current operative public archive in good standing under the registry.	Use as current evidence, subject to authority, evidence, and integrity checks.
Superseded	A newer certified archive replaced this record as current.	Retain as historical evidence and inspect the current archive before operational reliance.
Expired	The record or credential reached the end of its validity window.	Retain historically and require renewal or a current certificate before operational reliance.
Corrected	A later certificate corrected a clerical, identity, eligibility, disciplinary, or governance issue.	Review both the original and corrective certificate lineage.
Revoked	An authorized issuer or registry authority withdrew reliance on the record.	Do not rely operationally without reviewing reason, authority, timestamp, and appeal status.
Withdrawn	The issuer removed the record before certification completion or public reliance.	Treat as unavailable for reliance and preserve withdrawal authority, timestamp, and reason.
Rejected	The record failed authority review, evidence review, eligibility review, or policy review.	Do not rely; preserve rejection reason, review authority, and any appeal path.
Suspended	Reliance is temporarily paused while authority review or policy checks continue.	Treat as unavailable for current reliance until the registry resolves standing.
Disputed	A formal challenge, appeal, or correction request is attached to the record.	Preserve the dispute file and avoid final conclusions until the authority decision is recorded.
Pending authority review	The record exists, but issuer, evidence, privacy, or governance review is not complete.	Use neutral language and escalate to the governing authority before relying on it.
Archived	The record is retained for historical or audit access, but is not presented as current.	Preserve as historical context and verify whether a current operative record exists.

Governance primitives

These are the product concepts the architecture needs before federation-scale review can be institutionally defensible and constitutionally governed.

Revocation model

Record revocation authority, reason code, timestamp, affected artifacts, appeal state, and public visibility rules.

Correction model

Issue corrective records with lineage instead of overwriting certified history, and distinguish clerical, identity, eligibility, disciplinary, and governance corrections.

Dispute lifecycle

Track raised, under review, evidence requested, authority decision pending, resolved, escalated, appealed, and closed states.

Authority delegation

Model who may issue, revoke, correct, supersede, freeze, or certify records across federation, regional, league, club, and operator scopes.

Authority hierarchy

Define parent-child authority relationships across federation, regional, league, club, auditor, and operator levels.

Conflict resolution

Define how competing authority actions, corrections, disputes, certifications, and appeals are resolved without deleting preserved records.

Ruleset versioning

Attach policy name, version, effective date, and governing scope to certification and later authority actions.

Public scope and redaction

Support minor-safe displays, redacted public receipts, consent-aware identity data, and jurisdiction-specific privacy controls.

Naming standard

Use public names for accessible UX, institutional names for governance review, and technical names for implementation and audit artifacts.

Public labelInstitutional termTechnical artifact

Public Trust ReceiptPublic summary artifactReceipt URL, QR, PDF, or screenshot

Certificate RegistryAuthority resolverRegistry lookup report

Technical CertificateCertified Evidence RecordCertificate JSON, PDF, evidence manifest

Payload VerifierIntegrity VerifierSHA-256 comparison receipt

Trust BundlePortable evidence packageSigned ZIP, manifest, signature, session receipt