Document actual function, effect and risk.
High-impact automated decisions
When automation materially interferes with citizenship, identity, Justice, elections, essential benefits, taxation, public employment, biometrics or other significant legal positions, the proposed Constitution requires an enhanced regime before it produces real effects.
Proposed Constitution · reference text · not promulgatedHigh impact is not a technical label: it is a constitutional category defined by the effect of automation on people and groups.
When automation materially interferes with citizenship, identity, Justice, elections, essential benefits, taxation, public employment, biometrics or other significant legal positions, the proposed Constitution requires an enhanced regime before it produces real effects.
Before critical deployment
Body, purpose, provider, data and channels.
Rights, discrimination, privacy, accuracy and alternatives.
Independence where constitutional risk is high.
Incidents, versions, changes and residual risk.
Residual risk may prevent deployment
An impact assessment is not a form used to justify any system. If high residual risk cannot be reduced to a constitutionally acceptable level, deployment must be prevented or materially limited. Significant changes in purpose, data, provider, model or threshold require reassessment.
How this right appears in practice
You must be able to find sufficient public information about the system when it is high-impact and lawfully in use.
If the system influences a decision affecting a right, the output must be reconstructible with its version, relevant inputs and recorded interventions.
The provider cannot be the sole source of evidence that its own system is compliant.
Implication for people who use Candeia
When a corresponding operation exists in Sistema Candeia, it will be carried out by the competent module. GOV.CANDEIA explains rules, limits and pathways; it does not make the decision or create legal status on its own.
What this safeguard does not mean
Registration and audit do not legalise a prohibited purpose.
Projects that process real data or affect people cannot be artificially labelled a “pilot” to evade safeguards.
Details that reveal an exploitable vulnerability or legitimate secret may have controlled access, but competent oversight remains.
Access through Candeia OS
When a corresponding operation exists in Sistema Candeia, it will be carried out by the competent module. GOV.CANDEIA explains rules, limits and pathways; it does not make the decision or create legal status on its own.