Define local profile evidence retention and export

[nisavid]

Parent

• Ship bundled residency profiles with local adaptation

Question

What local evidence may be retained, redacted, exported, and reused for a future manually curated release? Define privacy and secret boundaries, bounded local retention, content-addressed identity, explicit export semantics, and how an exported overlay remains evidence rather than shared catalog authority.

Blocked by

• Implement the deployment-local overlay store and activation root
• Implement the isolated residency profiling transaction