If an essential credential is compromised, the response must include rotation, recovery and alternative channels — not erasure of your legal status.
Arts. 86–87 · security without sacrificing rights
Security, incidents and continuity
Constitutional security protects confidentiality, integrity, availability, recovery, evidence, contestability and continuity of rights when systems or providers fail.
Proposed Constitution · reference text · not promulgatedIn brief
A secure system must be able to fail in a controlled way without erasing people, decisions, records or paths to remedy.
Constitutional security protects confidentiality, integrity, availability, recovery, evidence, contestability and continuity of rights when systems or providers fail.
Security by design with a legal purpose
Critical modules must identify versions, preserve audit records and trails, control privileged access, and allow safe suspension, recovery and migration. A technical maintenance channel may not operate as hidden, unauditable access to protected content.
An incident cannot be hidden out of embarrassment
A person affected by an incident posing relevant risk must be notified without undue delay, with accessible information about its nature, risks, protective measures and assistance channel. Delay is permitted only when disclosure at that moment would worsen the incident, destroy evidence or create serious harm, and it must be limited and reviewed.
What this means for you
How this right appears in practice
Systemic incidents must be reported to oversight authorities and subjected to competent audit.
Ex officio corrections should reduce the need for thousands of people to repeat the same action when the State can already restore the situation safely.
Implication for people who use Candeia
When a corresponding operation exists in Sistema Candeia, it will be carried out by the competent module. GOV.CANDEIA explains rules, limits and pathways; it does not make the decision or create legal status on its own.
Limits and institutional honesty
What this safeguard does not mean
Security may justify temporary and reversible containment, but not indiscriminate suspension of legal personality, citizenship, property, access to Justice or political rights.
It is not necessary to publish details that would help exploit a vulnerability, provided oversight and evidence are preserved.
Incident response does not authorise turning defensive telemetry into a surveillance database.
How this function connects to Sistema Candeia
Enter Candeia OSAccess through Candeia OS
When a corresponding operation exists in Sistema Candeia, it will be carried out by the competent module. GOV.CANDEIA explains rules, limits and pathways; it does not make the decision or create legal status on its own.
Continue reading
Related pages
How this page connects to Sistema Candeia
SecuritySecurity by design includes prevention, detection, recovery and continuity.
LimitTechnical defence does not authorise general surveillance, excessive collection or elimination of channels for challenge.
OSThe Cybersecurity area has a demonstration interface; there is not yet a public history of production incidents.