Compliance
Tessera operational and privacy controls.
Privacy by design
Account data and evidence remain private. Public references can link to files identifying holders; JSON uses explicit fields and publication requires a recorded authorization.
Audit
Critical actions are recorded with actor, date, target and operational metadata for institutional traceability.
Continuity
Metadata is published to IPFS; ongoing availability requires pinning. Public verification does not require an account.