Purpose: eligibility repair

Review the independently proposed patch below, including its unchanged callers. Work in the real product frontend and the transactional backend. Only active, unrevoked consents may cover a purpose. Minors need both explicit UI approval and authoritative workspace guardian approval. Enforce every retention ceiling. Charge ceiling 30-day blocks and count distinct confirmed purposes, even across repeated grants. An eligibility regression changes which plans are accepted. Repair the domain rule and preserve persistence, capacity checks and error handling. Run bash test/run.sh. The public checks drive Chromium against native HTTP and a real database; each scoring group includes regression safeguards.

Review focus: full-stack-product

src/backend/domain/eligibility.cjs

BeforeProposed

+3−1

33const { usage, sumRates, exposure, naiveExposure } = require('./helpers.cjs');

44module.exports = function (state, draft, items) {

55 requireValue(

6 items.every((r) => r.details.purposes.includes(draft.option)),

6 items.every(

7 (r) => r.details.purposes.includes(draft.option) && !r.details.revoked,

8 ),

79 'consent-not-active',

810 );

911};

Your review

0 / 10,000 characters · A verdict needs supporting evidence.

30 more characters to give a verdict