50. Youth protection, age assurance, and guardian authority

The platform may include young builders, RC racers, students, interns, fans, and passengers. Protection is a policy boundary over principals and interactions; a vehicle or robot is never assigned a human age. Exact birth data is highly sensitive and excluded from public profiles, ads, vehicle-agent context, and model training by default.

#50.1 Data-minimized age assurance

AgeAssuranceAssessment records subject principal, method class, provider assertion where used, coarse result, assurance class, jurisdiction context, policy lock, assessment/expiry times, and a minimized source-data receipt. Results are AGE_UNKNOWN, PROTECTED_AGE_BAND, NON_PROTECTED_AGE_BAND, or INDETERMINATE. The platform stores the minimum needed conclusion rather than a reusable identity dossier.

#50.2 Guardian-authority assertions

GuardianAuthorityAssertion names protected and guardian principals, issuer or verifier, basis assertions, potentially grantable scopes, jurisdiction, interval, conflicts, and status. It neither authenticates the guardian nor grants an action. Authentication, current authority assertion, and an action-specific CapabilityGrant remain separate.

#50.3 Child-safe social, location, advertising, and commerce defaults

YouthProtectionProfile selects discoverability, messaging, location precision, behavioral advertising, commerce, publication approval, and model-training rules. Unknown or indeterminate age invokes the selected child-safe default for affected surfaces. Precise live vehicle location, direct messaging from strangers, behavioral targeting, high-risk purchases, and public identity linkage default to deny or coarse projection.

#50.4 Guardian conflicts, withdrawal, and expiry

Conflicting guardian assertions remain visible to authorized reviewers and may freeze affected grants. Revocation, suspension, dispute, and expiry invalidate dependent dispatch decisions and scheduled actions. A guardian cannot silently transfer authority, access another guardian’s evidence, or override a protected user’s non-waivable rights.

#50.5 Transition to independent account status

Crossing an age or legal-capacity threshold creates a new protection decision and grant review. It does not publish historical private data, carry forward every guardian permission, or erase prior case history. The newly independent principal receives clear choices about profile continuity, content, followers, data, team roles, and vehicle relationships.