The linkage between a persona and Root Identity is not a public field: its disclosure requires a specific legal basis, a legitimate purpose, necessity and proportionality.
Constitutional statusProposed Constitution · reference text · not promulgated
Operational authoritySistema Candeia / competent module, when the service becomes available
ScopePublic information
In summary
The essentials
The rule is confidentiality. Coercive disclosure depends on a court order or a competent independent authority; urgency without a prior order is exceptional, individualised, recorded and subject to subsequent review.
How it works
Flow of a valid disclosure
GroundsThere must be a legal basis and a legitimate purpose.
→
AuthorisationCoercion requires judicial or independent oversight, except in a strictly defined constitutional emergency.
→
Audit trailAccess must record the actor, data, purpose and time, with subsequent notification where applicable.
For the person
Practical consequence
An operator of a Sistema Candeia module cannot simply “click to discover” who is behind a persona. The architecture must require separate authorisation and leave an audit trail.
Limits
Safeguards and conditions
Journalism, opposition activity, research or trade-union activity are not sufficient grounds to reveal the linkage.
An ordinary contractual breach is not a constitutional emergency.
Subsequent review does not make originally abusive access lawful.
Constitutional basis
Read in the full text
See the related provisions in the Proposed Constitution.