# Lilith Identity, Memory, Safety, and Rights

V3 carries V1 trust guarantees into embodied interaction. Entering a world,
binding an avatar, speaking spatially, joining a class, attending a concert, or
capturing media must not create a lower-trust parallel identity system.

```mermaid
stateDiagram-v2
  [*] --> Anonymous
  Anonymous --> Authenticated: V1 identity bridge succeeds
  Authenticated --> Entitled: tenant world and experience access admitted
  Entitled --> Present: world session and embodiment created
  Present --> RecordingPending: voice capture replay or media requested
  RecordingPending --> Present: consent denied or request cancelled
  RecordingPending --> Recording: scoped consent and disclosure accepted
  Recording --> Present: capture ends and retention posture is recorded
  Present --> Restricted: safety moderation rights or payment boundary changes
  Restricted --> Present: appeal correction or entitlement recovery succeeds
  Restricted --> Removed: takedown ban withdrawal or deletion requires exit
  Present --> Recalling: content or persona recall begins
  Recalling --> Removed: references caches and runtime availability reconcile
  Present --> Ended: member leaves or session expires
  Ended --> Entitled: supported resume
  Removed --> [*]
  Ended --> [*]
```

Embodiment and recording introduce additional consent and safety states, but do
not replace account identity, tenant authorization, provenance, moderation, or
data-rights controls.

## Trust stack

| Layer                      | Responsibility in V3                                                                                                |
| -------------------------- | ------------------------------------------------------------------------------------------------------------------- |
| Identity and tenant        | Bind a V1 account/session to embodied identity, tenant, room, role, entitlement, and region.                        |
| Iris memory                | Govern permitted continuity across member, practice, scene, and session scopes.                                     |
| Lilith body/persona policy | Apply tone, crisis, voice abuse, unsafe claims, cultural sensitivity, costume/body, and embodied interaction rules. |
| Sophia grounding           | Support instructor lineage, artist backstory, educational, cultural, and venue claims with governed sources.        |
| Consent                    | Govern recording, physical adjustment, biometric/pose, voice cloning, captures, and secondary use.                  |
| Provenance and rights      | Preserve asset/persona/performance lineage, licenses, C2PA manifests, royalties, disputes, and takedown.            |
| Moderation and Themis      | Handle reports, evidence, action, appeals, and rights/credential disputes.                                          |

The policy and data paths are detailed in
[Identity, safety, and provenance foundations](../../features/identity-safety-provenance-foundations.md)
and
[Persona policy, provenance, and rights architecture](../../architecture/persona-policy-provenance-and-rights.md).

## Identity bridge

The V1 identity bridge resolves account/session, tenant, entitlements, release,
region, age/minor posture, roles, avatar binding, and permitted room access. The
world receives a bounded embodied identity rather than the full account profile.
Nameplates and public presence use the member's chosen visibility policy.

Avatar binding and swaps are authoritative, versioned operations. Client-side
appearance is not identity proof, and a synthetic persona cannot be confused
with a human instructor or attendee.

## Memory and continuity

Iris governs memory scopes, consent, retention, decay, conflict, suppression,
export, and erasure. V3 adds embodied context—room/session, class continuity,
scene state, pose or preference records—but does not bypass Iris by storing an
unbounded “world memory.”

Biometric, pose, voice, health-adjacent, or spiritual-practice information is
sensitive. Collection and durable use require a stated purpose, minimum fields,
consent where applicable, retention, access policy, and deletion behavior.

The base contract is
[Iris Memory and Identity](../../../V1/features/iris-memory-identity.md).

## Safety at the body

Embodied policy covers more than text:

- personal space, unwanted following/contact, blocking, and safe teleport/exit;
- voice abuse, mute, speaking indicators, and moderator access;
- costume/body constraints and impersonation;
- motion/pose and physical-adjustment consent;
- photosensitive, motion-sickness, and accessibility-safe modes;
- crisis language during live classes or social interaction;
- minor protection, room eligibility, guardianship/communication rules;
- capture/recording indicators and consent;
- teacher/artist persona boundaries and unsafe claims.

The body-policy adapter reuses the V1 Lilith policy substrate. More severe
signals supersede ordinary persona tone or activity. Safety does not degrade on
the Tier 2 client.

## Recording, voice, and biometric consent

Consent is granular by subject, purpose, media/data type, context, recipient,
duration, and revocation. Distinguish:

- live voice transport from recording/storage;
- class/performance capture from voice cloning;
- pose processing for immediate cues from durable biometric/analytics records;
- private replay from public distribution;
- persona voice license from an individual performance release.

Recording state must be visible in-world and accessible. Revocation/takedown
propagates to recordings, derivatives, training eligibility, and distribution
according to the contract.

See [Voice Cloning Consent Registry](../../VOICE_CLONING_CONSENT_REGISTRY.md),
[Recording Consent Flow](../../RECORDING_CONSENT_FLOW.md), and
[Voice Transcript Retention](../../VOICE_TRANSCRIPT_RETENTION.md).

## Grounding and cultural/lineage integrity

Instructor credentials, yoga lineage/teaching claims, artist biographies,
genre/cultural context, venue interpretation, and educational content use Sophia
sources and explicit support state. A generated dossier or persuasive
performance is not evidence.

Cultural adaptation review checks locale and community context without reducing
a living tradition to aesthetic tokens. Claims and generated assets can be
blocked, revised, caveated, or escalated independently.

## Provenance

Lineage links source assets, prompts/briefs, model/workflow versions, consent
and licenses, executions, edits, performances, captures, derivatives, quality
results, review decisions, and releases. V3 extends provenance with embodied
context such as performance/venue and synchronization data.

C2PA/content credentials provide tamper-evident assertions and signer identity;
they do not independently prove copyright ownership, consent, truth, or policy
approval. The release gate requires both provenance integrity and the relevant
rights/consent decisions. See [C2PA Every Export](../../C2PA_EVERY_EXPORT.md).

## Rights, commerce, and royalties

Tickets, tips, subscriptions, virtual goods, signed editions, and remix/sample
licenses bind to product entitlements and rights records. Royalty waterfalls
retain contributors, licenses, percentages/basis, territory/currency,
settlement, and dispute posture. A payment receipt does not grant media rights
beyond the associated license.

Voice likeness, music samples, choreography/class recordings, avatar identity,
venue assets, and generated derivatives have distinct rights. The commerce
service and Aje integration execute approved terms; they do not decide whether
the terms are valid.

## Moderation, reporting, and appeals

Reports bind room/session/performance, subject and reporter, evidence pointers,
policy version, action, notice, retention, and appeal. Immediate protection
(mute/block/remove/freeze capture) is separate from final adjudication. Themis
handles governed disputes such as rights or credential challenges.

Moderators receive the minimum evidence needed and sensitive live/voice data is
access-controlled. Operator action is audited and appealable under the relevant
policy.

## Takedown and recall

A substantiated claim can block a pending release, freeze distribution, revoke
entitlements where lawful, and cascade through derived assets, concerts,
archives, signed editions, and external channels. The cascade is idempotent and
receipt-driven; missing downstream acknowledgment remains visible until
resolved.

## Related

- [Commerce, rights, and takedown](../../features/commerce-rights-takedown.md)
- [Governance, safety, recording, and consent](../../features/governance-safety-recording-consent.md)
- [Member persona and experience](./member-persona-and-experience.md)
- [Studio, creator, and media pipelines](./studio-creator-and-media-pipelines.md)