RFC 0007: Privacy Preserving Projections

Status: Draft Author(s): OAP Working Group on Confidentiality and Compliance Created: 2026-05-03 Working Group: CCC Targets: 1.1

1. Summary

This RFC introduces Projections, a normative mechanism by which a Tool returns a deterministic, trust level dependent subset of an Entity instead of the full record. A single Entity yields different views to a stranger, an acquaintance, a known contact, a trusted partner, and a member of the inner circle. Projections eliminate the recurring pattern in which Tools either return everything or nothing, and they make minimum necessary disclosure operationally cheap rather than expensive.

2. Motivation

Sharing data between Agents currently has two modes: full disclosure or no disclosure. The middle ground (free or busy without titles, name and role without phone number, calendar availability without subject lines) is implementable in principle but absent in practice because every Tool reinvents the rules.

Production deployments show that minimum necessary disclosure is the default expectation of users for any data shared outside the inner circle. Without a normative primitive, the choice in practice is between unsafe full disclosure and unusable no disclosure.

3. Specification

3.1 Terminology

3.2 Trust Level Schema

Trust Levels are normative integers from 0 to 4:

3.3 Projection Profile Examples

The the OAP community publish normative Projection Profiles for each Canonical Entity (RFC 0005).

oap.entity.contact

oap.entity.calendar_event

oap.entity.task

3.4 Projection Request

A requesting Agent MAY include a Trust Level claim in its Invocation:

{
  "request": {
    "projection": {
      "requested_trust_level": 2,
      "evidence": [
        { "type": "OAPConnectionVouched", "credential": "..." }
      ]
    }
  }
}

The Tool MUST evaluate the evidence and determine the actual Trust Level using its own scoring. The Tool MUST NOT grant a Trust Level higher than the evidence supports. The Tool MAY grant a Trust Level lower than requested.

3.5 Projection Response

The Response Envelope MUST disclose the Trust Level applied and the Profile used:

{
  "result": {
    "projection_applied": {
      "trust_level": 2,
      "profile": "oap.profile.projection.contact.v1",
      "redacted_field_count": 9,
      "lawful_basis": "legitimate_interest"
    },
    "data": { "...": "projected entity" }
  }
}

3.6 Projection Receipt

The Receipt MUST record both the Trust Level applied and the Lawful Basis Tag, allowing audit reconstruction of which fields were disclosed under which justification.

3.7 Manifest Declaration

{
  "projections": {
    "supported": true,
    "default_trust_level_for_unknown_did": 0,
    "supported_profiles": [
      "oap.profile.projection.contact.v1",
      "oap.profile.projection.calendar_event.v1",
      "oap.profile.projection.task.v1"
    ],
    "trust_evidence_accepted": [
      "OAPConnectionVouched",
      "OAPMutualGroupMembership",
      "OAPProfessionalCode"
    ]
  }
}

4. Backward Compatibility

Tools that do not declare projections.supported = true continue to return full Entities or full denial. Existing Agents that do not request a Trust Level receive the Tool's default behavior.

5. Security Considerations

1. Trust Level Inflation. Tools MUST NOT accept self asserted Trust Level claims without verifiable evidence.
2. Cross Reference Reconstruction. A counterparty MAY combine multiple Projections to reconstruct fields that no single Projection discloses. Tools SHOULD impose rate limits and flag suspicious access patterns.

6. Privacy Considerations

Projections operationalize the GDPR principle of data minimization. Tools that implement Projections SHOULD declare data minimization as their default lawful basis where applicable.

7. Conformance Impact

Projection support is RECOMMENDED at all Conformance Levels and REQUIRED at L4 (Collaborative). The OAP community will publish a Conformance Test Suite that verifies Projection Profile correctness against the published normative tables.

8. Implementation Experience

AssistNet operates Projections in production for contacts, calendar events, and shared documents. The Trust Level evaluation, Projection Profile selection, and Receipt schema described in this RFC are direct generalizations of the AssistNet Sharing System. Reference code is committed to reference/server/projections/.

9. Alternatives Considered

1. Field level access control lists. Rejected because per field ACLs do not scale to thousands of contacts.
2. Differential privacy noise. Rejected because semantic correctness of returned fields is required for downstream agent reasoning.

10. References

1. OAP-CORE-1.0, Sections 17 (Data Policy), 18 (CCC).
2. EU GDPR Article 5(1)(c) (Data Minimization).