Public preview of the MAF path from protected participation toward governed community intelligence, human-reviewed matching, and possible CES 1+6 transaction pilots. Gate 3 remains locked.
The approved control package records a planning path only. It does not open Gate 3, move the pilot to Active, or create a participant-facing matching or exchange service.
Six protected participation steps accepted at v0.
Matching and exchange require separate KCE authorization.
External PDPA legal review still blocks Pilot -> Active.
No participant-data Qdrant and no n8n activation.
The phases are governance checkpoints. Later phases require new written approval before any live matching, exchange, or transaction activity can start.
Review Gate 2 evidence, consent, privacy, R-4 status, and stop conditions before any future request to open Gate 3.
Planning only. No runtime change.Use aggregate, de-identified, public, governance, or synthetic information for community planning and service-gap learning.
No person-to-person matching.Test candidate-match logic with synthetic or approved de-identified records, with clear labels that outputs are not match offers.
No participant/provider contact.Only after explicit Gate 3 authorization, reviewers may evaluate candidate matches before any contact.
Human review before match.Only after separate transaction authorization, a pilot may classify Money, Time, Gift, Swap, Barter, Mixed, and Shared transaction records.
Offer and acceptance before exchange.Aggregate reviewed evidence into de-identified learning without clinical, legal, eligibility, or compliance claims.
Public wording requires approval.Decide whether to close, continue, pause, roll back, defer, or redesign based on reviewed evidence and unresolved risks.
KCE closeout decision required.Automation may not approve, rank, contact, or exclude participants or providers.
Purpose-specific consent must exist before personal data is used for a governed action.
No service, time, gift, swap, barter, mixed, shared, or money exchange may begin before acceptance.
Each decision, approval, dispute, cancellation, and rollback requires traceable evidence.
Minimum necessary information, de-identification, and small-cell suppression apply before data movement or publication.
Live matching or exchange cannot start unless cancellation, rollback, and dispute paths are defined.
Source package: km-base commit e329f4d, "Add MAF Gate 3 governance control package".
Authoritative governance records remain in km-base and governance.timebank.tw. This public preview is a plain-language summary only.