Consent Record Validator

Reliability

Fully deterministic and independent of the machine: the same record, policy and asOf give the same verdict whatever the default locale, zone or charset. Two design choices are worth knowing before you rely on the output. First, a record stating both expiresAt and grantedAt plus duration that disagree by even one second is refused rather than resolved, because picking a winner would let a broken record validate cleanly under whichever precedence you did not expect. Second, consent is valid over the half-open window from grantedAt up to but not including the effective expiry, so an asOf exactly equal to the expiry is expired, and the same rule makes an asOf equal to withdrawnAt withdrawn. Severity is fixed per code rather than varied by policy, and the require flags decide whether an issue is raised at all, not how badly. Refusals, and what to do about each. GOV_CONSENT_INPUT_TOO_LARGE means the declared request is past the 65,536-byte inline limit, so send fewer purposes. GOV_CONSENT_RECORD_INVALID means a record member is the wrong type, empty where a value is needed, or outside its charset, and the message names the path. GOV_CONSENT_FIELD_UNKNOWN means a property we do not declare turned up, so delete it rather than assuming it was read. GOV_CONSENT_POLICY_INVALID means the policy block is malformed — a non-string purpose id or an out-of-range maxDurationDays. GOV_CONSENT_PURPOSE_LIMIT_EXCEEDED means more than 64 purposes arrived in the record or the policy. GOV_CONSENT_PURPOSE_ID_DUPLICATE means one purpose id appears twice, which makes its granted flag ambiguous, so merge them. GOV_CONSENT_LAWFUL_BASIS_UNSUPPORTED means a basis outside the six Article 6(1) members arrived in the record or in allowedLawfulBases. GOV_CONSENT_WITHDRAWAL_STATE_UNSUPPORTED means withdrawalState is not ACTIVE, WITHDRAWN or SUPERSEDED. GOV_CONSENT_EVIDENCE_METHOD_UNSUPPORTED means evidence.method is outside the five members; send UNKNOWN rather than inventing a label. GOV_CONSENT_WITHDRAWN_AT_MISSING means the state says WITHDRAWN with no instant, which cannot be placed on the timeline, so supply withdrawnAt. GOV_CONSENT_TIMESTAMP_INVALID means a record instant carries no explicit offset or does not parse, so add the offset. GOV_CONSENT_DURATION_INVALID means the duration is not an ISO-8601 duration between P1D and the P36500D equivalent. GOV_CONSENT_EXPIRY_CONFLICT means expiresAt and grantedAt plus duration state two different instants, so correct the record rather than asking us to choose. GOV_CONSENT_ASOF_INVALID means asOf carries no explicit offset or does not parse. GOV_CONSENT_TIMEZONE_REQUIRED means the duration carries a calendar component, where a day is 23, 24 or 25 hours, so send policy.timeZone. GOV_CONSENT_TIMEZONE_UNKNOWN means the zone is not an IANA id such as Europe/Amsterdam. GOV_CONSENT_WORK_REFUSED means the projected checks went past the budget of 1,024, and the refusal reports both numbers.