Hypermega rights and release matrix

control_id,stage,field,evidence,review_owner,hold_condition,release_effect,status
HYP-01,Identify,work_id,Stable work record,Programme operations,No unique work identity,Exclude work from intake,Proposed control
HYP-02,Identify,creator,Source attribution and correction contact,Programme operations,Attribution unresolved,Retain in review queue,Proposed control
HYP-03,Authorise,rights_holder,Authorisation file reference,Governance,Authority to grant use unresolved,Do not capture for release,Proposed control
HYP-04,Authorise,permitted_uses,Separate use schedule,Governance,Dataset or training use not specified,Do not infer permission,Proposed control
HYP-05,Authorise,territory_and_term,Scope and expiry fields,Governance,Applicable territory or expiry unresolved,Block affected release,Proposed control
HYP-06,Capture,source_file,Immutable source reference and checksum,Technical capture,Source identity missing,Repeat intake verification,Proposed control
HYP-07,Capture,capture_event,Date operator equipment and settings,Technical capture,Capture conditions undocumented,Keep technical status incomplete,Proposed control
HYP-08,Transform,derivation_record,Input output and transformation description,Data operations,Derivative cannot be traced to source,Exclude derivative,Proposed control
HYP-09,Review,quality_result,Recorded pass hold or exception with owner,Data operations,Open exception without decision owner,Hold affected item,Proposed control
HYP-10,Release,manifest,File list hashes and record versions,Release owner,Manifest differs from package,Stop release,Proposed control
HYP-11,Release,rights_snapshot,Approved scope as of release date,Governance,Scope differs from intended recipient use,Revise package or agreement,Proposed control
HYP-12,Correct,supersedes,Earlier release ID and correction reason,Release owner,Previous recipients cannot be identified,Escalate correction process,Proposed control
HYP-13,Research,consent_protocol,Separate approved protocol and consent,Research lead,No approved consent or ethics route,No participant collection,Proposed control
HYP-14,Preserve,restore_check,Retrieved package compared with manifest,Archive custodian,Package cannot be restored or verified,Record incident and rebuild from retained sources,Proposed control