How a watch is granted — and revoked
A standing-witness watch is authority-bearing, never a subscription toggle. Granting one is a governed decision through the one KYE Protocol™ decision engine, under the Purpose Permission™ consent rule the watched surface names — the same discipline that makes it defensible in an examination.
| Field | What Regulator Watch™ binds |
|---|
| Grant | A typed standing-witness follow edge, admitted by a governed decision with sealed evidence — who authorised the watch, under which rule, is itself on the record. |
| Scope | The watched entity's declared state classes only (status transitions, obligation reviews, contract-version publishes) — never the entity's private data plane, which stays tenant-isolated. |
| Visibility | Overt by default. A covert supervisory watch seals the follower's identity to tenant admin and auditor standing while the fact that covert followers exist stays visible — sealed identity, never sealed existence. |
| Evidence | Every feed item carries an Evidence Pack™ reference and a public verify link, aligned with EU AI Act™ Article 12 record-keeping and ISO/IEC 42001 audit-trail expectations. |
| Revocation | An edge lifecycle event, not a deletion — the watch can be revoked with a reason code, and the history of the watch itself remains replay-verifiable. |
The evidence chain behind each item is the standard KYE Protocol™ governance family, made durable by the Resilience Loop™ — replay-provable from published keys alone, no privileged access to KYE™ required to check it.