QAEDA-TST-007 · procedural safeguard

Bound scope, secondary use, and duration

What prevents a narrow authority, dataset, classifier, or emergency control from being reused for broader purposes or persisting after its justification changes?

Pass condition

What a defensible proposal should be able to show.

The intervention defines who and what is outside scope, limits retention and secondary use, assigns independent review, and contains a meaningful sunset or renewal burden tied to evidence.

Warning signs

Signals that the proposal is drifting.

  • Terms such as relevant, dangerous, safety, or systemic risk have no limiting definition.
  • The same dataset can be reused for unrelated enforcement or commercial purposes.
  • Emergency powers renew automatically or without efficacy evidence.
  • Oversight depends entirely on the operator that benefits from the authority.

Evidence to demand

What should exist before confidence rises.

  • Explicit exclusions and purpose-limitation language.
  • Retention and deletion schedules.
  • Independent review authority and access to necessary records.
  • Sunset dates or renewal criteria linked to measured need and benefit.
Failure mode

Infrastructure built for a narrow emergency can become a normalized platform for unrelated surveillance or control.

Decision discipline

No single passing test licenses the intervention.

Apply the full sequence. A defined harm does not excuse a weak nexus; a narrow mechanism does not excuse secret secondary use; an appeal process does not prove efficacy.