Made With

Creative track Build lane AI Passport Ideathon

Consent that travels both ways — a purpose-scoped grant going into an AI tool, and an attribution receipt coming back out that proves how the work was made without containing any of it.

Lumen Studio is requesting access

Unsigned

You are Riya Mehta, a freelance illustrator. An AI image tool wants your passport context so it stops making you re-explain your own style every session.

Slices requested taste — palette, composition and subject preferences style — your line quality and aesthetic descriptors knowledge.portfolio — your past commissioned work as reference purchases — what you buy. An image tool has no use for this.

Purpose — three separate questions serve_me — use my context to do my work may_train — retain my context to improve the model may_serve_others_in_my_style — let other users prompt in my style

Expiry

Expires

A grant with no expiry cannot be issued. Twelve months is the ceiling.

Use Grant — what Lumen receives

Notice what is absent: no legal name, no location, no client list, no other connected apps, no other grants. Lumen learns that a passport holder authorised it, and nothing else about the person.

Session ended — receipt received

Waiting

Lumen emits the receipt to you, not to the world. Nothing is published until you say so.

Attest the assistance ideation — thumbnails and directions explored reference — moodboard and colour studies generation — rendered elements used in the final piece editing — cleanup, upscale, retouch

An unordered set. There is deliberately no percentage, no score, and no way to render "more human than".

Disclosure level — per piece of work

Level

There is no L3. The passport never receives the work, so drafts and prompts are not disclosable — by construction, not by policy.

What the client sees

—

Work Receipt — the full object you hold

Withdraw consent

Active

The contract ended, or you changed your mind. Either is sufficient reason and neither requires an explanation.

Revocation is not amnesia. Past receipts are not deleted — deleting them would let you quietly erase a disclosure a client already relied on. They are stamped consent_withdrawn, with the date. That is the honest behaviour.

Enforceable: future reads fail closed. Contractual, not technical: deletion of context Lumen already copied. The design makes non-compliance visible — reads against a dead grant surface in the ledger below. That is the honest ceiling for what any consent layer can do.

The published badge, after revocation

Audit ledger — visible only to Riya

0 events

Time	Event	Detail