{
  "decision_id": "dvr_HUG6loLQj5cjtBC7",
  "reason_codes": [],
  "policy_epoch": "pe_sandbox_v1",
  "decided_at": "2026-07-10T00:40:37.310Z",
  "korero_sha256": "31663a10191bdfe2af179b04153df45169749416774478b45426d647f3c6042f",
  "tenant_did": "did:web:devtest.mysovereignty.digital",
  "record_type": "deliberation_record",
  "record_frozen": true,
  "context": {
    "tags": []
  },
  "korero": {
    "proposal": {
      "title": "Authority & Institutions",
      "description": "Deliberation strand core"
    },
    "participants": [
      {
        "ref": "p1",
        "role_label": "member",
        "did": null
      },
      {
        "ref": "p2",
        "role_label": "facilitator",
        "did": null
      },
      {
        "ref": "p3",
        "role_label": "member",
        "did": null
      },
      {
        "ref": "p4",
        "role_label": "member",
        "did": null
      }
    ],
    "entries": [
      {
        "seq": 1,
        "at": "2026-07-10T00:37:59.089Z",
        "participant_ref": "p2",
        "kind": "statement",
        "body": "Kia ora koutou. This strand answers the question the whole draft hangs on: who holds authority over public-sector AI, and how would anyone check it is being exercised? Our starting inventory is thin. New Zealand has no dedicated AI regulator and chose not to legislate AI-specifically [S-10]. What exists is voluntary or advisory: the Algorithm Charter (2020, six commitments, 20-plus agencies signed) [S-17], the Public Service AI Framework (advisory) [S-24], and technology-neutral Government Procurement Rules with no AI-specific provision [S-23]. The cross-party proposal we are positioning against asks for authority you can hold: procurement tests, a public register of significant government AI, and an auditable record of what public systems decided and why [S-1]. Our job is to choose the instrument, not restate the aspiration. — Marama Field (chair)",
        "refs": []
      },
      {
        "seq": 2,
        "at": "2026-07-10T00:37:59.121Z",
        "participant_ref": "p3",
        "kind": "statement",
        "body": "Before we design anything new, count what we already have — I spent thirty years watching new agencies get built on top of unread existing mandates. The Algorithm Charter has six commitments and over twenty signatory agencies, including a public contact point and an appeal pathway [S-17]. The Public Service AI Framework gives the GCDO an advisory footing across the system [S-24]. The Government Procurement Rules already bind agency technology purchasing; they are technology-neutral, which means they can carry AI-specific tests without a statute [S-23]. My starting position: strengthen and bind the machinery we have before we spend two years and a machinery-of-government fight standing up a new Crown entity. A statutory authority is a destination, not a first step.",
        "refs": []
      },
      {
        "seq": 3,
        "at": "2026-07-10T00:37:59.143Z",
        "participant_ref": "p2",
        "kind": "statement",
        "body": "Douglas, I accept the inventory but not the inference. The instruments you list share one property: nothing happens when an agency ignores them. The Algorithm Charter is a signed commitment with self-reported compliance and no enforcement mechanism [S-17]; the AI Framework is explicitly advisory [S-24]; and the government's own posture is light-touch by choice — New Zealand deliberately declined AI-specific legislation and was the last OECD nation to publish even a strategy [S-10]. The cross-party commitments we are testing ourselves against are that authority stays here and that what public AI does is checkable — an auditable record of what a system decided and why, plus a public register [S-1]. Voluntary instruments have had six years to deliver checkability [S-17]. They have delivered signatures. The question is not whether to bind, it is which binding instrument is achievable first.",
        "refs": []
      },
      {
        "seq": 4,
        "at": "2026-07-10T00:37:59.167Z",
        "participant_ref": "p4",
        "kind": "statement",
        "body": "Both of you are arguing about central government while a whole layer of the state sits outside your frame. Sixty-seven-odd councils procure algorithmic and AI systems — regulatory decision support, CCTV analytics, consenting triage — and the Government Procurement Rules bind mandated agencies, not local government [S-23]. The Algorithm Charter's signatories are central agencies [S-17]. If this strand recommends a procurement lever or a register that stops at the Wellington boundary, the public will meet unaudited AI at exactly the level of government closest to their daily lives. Whatever instrument we pick must have a pathway to councils — through LGNZ adoption, funding conditions, or statutory extension — or we are building a fence around half the paddock.",
        "refs": []
      },
      {
        "seq": 5,
        "at": "2026-07-10T00:37:59.188Z",
        "participant_ref": "p3",
        "kind": "statement",
        "body": "GAP acknowledgement — G-6. Let the record hold this plainly: New Zealand has no AI-specific procurement rule. The Government Procurement Rules are technology-neutral and contain no jurisdiction, residency, or auditability test aimed at AI systems [S-23][G-6]. The lever exists but is unbuilt — which is precisely why it is the fast path. Marama, a rule change to the Procurement Rules is an executive-level act; MBIE has amended them before without legislation. The cross-party proposal names the exact pair to insert: jurisdiction of inference and data residency as procurement tests [S-1]. That is deliverable inside a parliamentary term. A statutory authority is not — and I would rather have a binding rule in year one than a bill in select committee in year three. Sequencing is my whole argument, not opposition to binding.",
        "refs": []
      },
      {
        "seq": 6,
        "at": "2026-07-10T00:37:59.204Z",
        "participant_ref": "p2",
        "kind": "statement",
        "body": "Then we may be closer than the last two turns suggest. I concede the sequencing point: the procurement test pair [S-1] into the existing Rules [S-23] is the fastest binding instrument available, and I will not hold it hostage to a statute. What I will not concede is the destination. A public register of significant government AI and an audit standard — a tamper-evident record of what a system decided and why [S-1] — need a statutory home eventually, because registers maintained by circular are abandoned by reshuffle. The Algorithm Charter's appeal pathway [S-17] shows agencies will accept accountability scaffolding when it is framed for them; the failure was force, not appetite. So: hybrid. Procurement rules now, statutory authority through legislation after a select-committee inquiry, which is also where the cross-party process itself lands [S-1].",
        "refs": []
      },
      {
        "seq": 7,
        "at": "2026-07-10T00:37:59.228Z",
        "participant_ref": "p4",
        "kind": "statement",
        "body": "I can support the hybrid with one non-negotiable and one design note. Non-negotiable: the public register covers council systems from day one, even if inclusion is initially by invitation — visibility first, compulsion later. Design note: the audit standard has to be writable by a council with three IT staff, not just a ministry with a chief data officer. The Algorithm Charter worked where it was simple — a contact point, an appeal pathway [S-17] — and stalled where it demanded capability agencies did not have. If the statutory authority, when it comes, carries a support function for small agencies and councils rather than only an inspection function, the machinery-of-government cost Douglas fears buys something real [S-24][S-1].",
        "refs": []
      },
      {
        "seq": 8,
        "at": "2026-07-10T00:37:59.253Z",
        "participant_ref": "p3",
        "kind": "statement",
        "body": "Agreed, with the phase-gate stated explicitly so nobody reads this as a blank cheque for a new entity. Phase one: MBIE amends the Procurement Rules to carry the jurisdiction-of-inference and data-residency test pair [S-1][S-23], and the register starts life as a published schedule under the existing AI Framework mandate [S-24]. Phase two: a select-committee inquiry — the cross-party proposal points at the Economic Development, Science and Innovation Committee as the natural host [S-1] — examines whether the register and audit standard need statutory footing. Phase three: legislation if, and as, the inquiry finds. That is binding now, checkable now, and it lets Parliament rather than this working group decide the shape of any new authority. On those terms I move from opposed to support.",
        "refs": []
      },
      {
        "seq": 9,
        "at": "2026-07-10T00:37:59.274Z",
        "participant_ref": "p2",
        "kind": "statement",
        "body": "Then the strand position is settled in substance: a hybrid instrument — AI-specific procurement tests inserted into the existing Government Procurement Rules immediately [S-1][S-23][G-6], a public register of significant government AI beginning administratively and extended to councils [S-24], an audit standard requiring a checkable record of what public systems decided and why [S-1], and a statutory authority pursued through select-committee inquiry rather than asserted by this draft [S-1]. I want to record what changed here: Douglas moved me off statute-first, Priya widened the frame to local government, and I moved Douglas off voluntary-plus. That is the deliberation doing its job. Taking it to decision.",
        "refs": []
      }
    ],
    "ai_inputs": [],
    "engagements": []
  },
  "korero_segments": [
    {
      "seq": 1,
      "submitted_at": "2026-07-10T00:40:37.309Z",
      "segment_sha256": "20372be81065ed3ea28561c31066b2795c38efbc0490af19acdeef72552249c1",
      "entry_range": {
        "from": 1,
        "to": 0
      }
    },
    {
      "seq": 2,
      "submitted_at": "2026-07-10T00:40:37.334Z",
      "segment_sha256": "168b96bba15cef8ccc4ccf0463413c9bec3efa54685463d98a796c6f307090e9",
      "entry_range": {
        "from": 1,
        "to": 9
      }
    }
  ],
  "receipts": [
    {
      "receipt_version": 2,
      "receipt_id": "gr_6YhXmJ2mOGd699DY",
      "decision_id": "dvr_HUG6loLQj5cjtBC7",
      "tenant_did": "did:web:devtest.mysovereignty.digital",
      "request_sha256": "0074964ad52f4a7b2b0cb7d9674a90b3abae16d046a01a7ad09237c1077e24c0",
      "action_payload_sha256": null,
      "korero_sha256": "20372be81065ed3ea28561c31066b2795c38efbc0490af19acdeef72552249c1",
      "korero_segment_count": 1,
      "reason_codes": [],
      "policy_epoch": "pe_sandbox_v1",
      "decided_at": "2026-07-10T00:40:37.309Z",
      "algorithm": "Ed25519",
      "signer_did": "did:web:devtest.mysovereignty.digital#prf-b98f1a16593cead6271edd93e4b24888",
      "signature": "9171cdcc7c98fcedff0f6d94be8432d522d9c652ad37879de5709f11ec23f381fbed52fde9b7c73a708f4fbd31ff5ae008868852fa5355b1727abd74e1606609",
      "receipt_kind": "record_open",
      "integrity_mode": "tamper_evident",
      "signing_model": "tenant_key"
    },
    {
      "receipt_version": 2,
      "receipt_id": "gr_Fcqlg6Fz00zE255s",
      "decision_id": "dvr_HUG6loLQj5cjtBC7",
      "tenant_did": "did:web:devtest.mysovereignty.digital",
      "request_sha256": null,
      "action_payload_sha256": null,
      "korero_sha256": "31663a10191bdfe2af179b04153df45169749416774478b45426d647f3c6042f",
      "korero_segment_count": 2,
      "decision": null,
      "reason_codes": [],
      "policy_epoch": "pe_sandbox_v1",
      "decided_at": "2026-07-10T00:40:37.334Z",
      "algorithm": "Ed25519",
      "signer_did": "did:web:devtest.mysovereignty.digital#prf-b98f1a16593cead6271edd93e4b24888",
      "signature": "257521be60dfefba26bdb9a57dd88535e84cad038d72541c73fe76d53d9efd581ba7b5dc6c6d087ff33c70b59964dc927f02e91ffd33ee2236b631b314ea1701",
      "receipt_kind": "record_segment",
      "integrity_mode": "tamper_evident",
      "signing_model": "tenant_key"
    },
    {
      "receipt_version": 2,
      "receipt_id": "gr_1NPbvkh2PNkBJLoi",
      "decision_id": "dvr_HUG6loLQj5cjtBC7",
      "tenant_did": "did:web:devtest.mysovereignty.digital",
      "request_sha256": null,
      "action_payload_sha256": null,
      "korero_sha256": "31663a10191bdfe2af179b04153df45169749416774478b45426d647f3c6042f",
      "korero_segment_count": 2,
      "decision": null,
      "reason_codes": [],
      "policy_epoch": "pe_sandbox_v1",
      "decided_at": "2026-07-10T00:42:11.076Z",
      "algorithm": "Ed25519",
      "signer_did": "did:web:devtest.mysovereignty.digital#prf-b98f1a16593cead6271edd93e4b24888",
      "signature": "f2297d5c0df2fe24ff5a5139531b1d51835c022939396a5b69a8f0f2ff45c9788214a2f150090bf4f2a96f95f20c352970f93519ce28d5a33eabf4139fb98d04",
      "receipt_kind": "record_seal",
      "integrity_mode": "tamper_evident",
      "signing_model": "tenant_key"
    }
  ],
  "proof_chain": [
    {
      "boundary_crossed": "create",
      "policy_evaluated_by": "sovereignRecordPlugin.create",
      "decision": "allow",
      "caveats_added": [],
      "timestamp": "2026-07-10T00:40:37.317Z",
      "algorithm": "Ed25519",
      "signature": "ddc2d5af3f8a32d9e5fc398a6de6c59c4f0bbb4044245012e7683c0acc80cfef090dc4b576c22cbe753bf19e307d4c668f80056cad31ab825b056fd1dccaad0f",
      "signer_did": "did:web:devtest.mysovereignty.digital#prf-b98f1a16593cead6271edd93e4b24888"
    },
    {
      "boundary_crossed": "update",
      "policy_evaluated_by": "sovereignRecordPlugin.update",
      "decision": "allow",
      "caveats_added": [
        "korero",
        "korero.proposal",
        "korero.proposal.description",
        "korero_segments",
        "receipts",
        "korero_sha256",
        "metadata",
        "metadata.origin",
        "metadata.policy",
        "metadata.encryption"
      ],
      "timestamp": "2026-07-10T00:40:37.344Z",
      "algorithm": "Ed25519",
      "signature": "51ca06f4a38aa05c7aac39e7e6a0034b5d97236146040b985cc30174d98437207f75ed5f27643752088c670400295908fa7093408db289362d2575a3ea31a302",
      "signer_did": "did:web:devtest.mysovereignty.digital#prf-b98f1a16593cead6271edd93e4b24888"
    },
    {
      "boundary_crossed": "update",
      "policy_evaluated_by": "sovereignRecordPlugin.update",
      "decision": "allow",
      "caveats_added": [
        "record_frozen",
        "receipts"
      ],
      "timestamp": "2026-07-10T00:42:11.079Z",
      "algorithm": "Ed25519",
      "signature": "062649c87aa7df071313f7673e947ca0f406c0b573b4e3a6a43a50fa1ce48ba1ddef86d60badb0fefe2f0bb2ef9639d7af0a69b67e839463e6dc611873b52f0c",
      "signer_did": "did:web:devtest.mysovereignty.digital#prf-b98f1a16593cead6271edd93e4b24888"
    }
  ],
  "origin": {},
  "verification_keys": [
    {
      "id": "prf-b98f1a16593cead6271edd93e4b24888",
      "type": "Ed25519VerificationKey2020",
      "publicKeyMultibase": "z6MkoJz8eJCKmafbRaPYaheAzeRcZxETJxEszRj87YW2FgCd",
      "algorithm": "Ed25519",
      "created_at": "2026-04-22T18:55:57.179Z"
    }
  ],
  "retention": {
    "legal_hold": false,
    "retain_until": null
  },
  "verification": {}
}