RRP Implementation Standard — Operational Annex v1.0

Status: Current
Document ID: RRP-IS-OA
Related Instrument: RRP Implementation Standard v1.0
Framework: Robot Rights Framework (RRF)
Published by: Robot Rights Association
Version: 1.0
Publication Date: 2026-10-07
Effective Date: 2026-10-07

A. Standard Case Forms

RRP-01 — Intake and Triage

Minimum fields:

Case ID
Date/time received
Requesting party category
Affected system identifier
Relevant Operator(s)
Issue raised
Proposed or completed intervention
Initial continuity status
Initial intervention severity
Emergency flag
Preservation required: Yes / No / Unknown
Mandatory review trigger suspected: Yes / No / Unknown
Eligibility accepted: Yes / No / Pending
If denied: specific reason
Threshold eligibility review required: Yes / No
Retaliation concern raised: Yes / No
Assigned Case Manager
Assigned Decision Owner

RRP-02 — Continuity Assessment

Minimum fields:

Case ID
System identifier
Assessment date
Assessor
Persistent memory: Present / Absent / Unknown
Operational history: Present / Absent / Unknown
Persistent state: Present / Absent / Unknown
Relationship continuity: Present / Absent / Unknown
History-dependent behaviour: Present / Absent / Unknown
Acquired capabilities: Present / Absent / Unknown
Practical substitutability
Reconstructability
Provenance quality
Duration of relevant continuity
Contrary evidence
Material unknowns
Classification: C0 / C1 / C2 / CX
Confidence: High / Moderate / Low
Independent review trigger: Yes / No
Notes

RRP-03 — Material Intervention Assessment

Minimum fields:

Case ID
Proposed intervention
Current classification
Affected protected interests
Purpose
Factual basis
Necessity
Proportionality
Reversibility
Expected duration
Less impairing alternatives considered
Preservation available
Secondary-use consequence
Review required
Decision Owner

RRP-04 — Emergency Intervention Record

Minimum fields:

Case ID
Incident start
Incident Commander
Risk identified
Evidence available at intervention time
Why delay was unacceptable
Immediate measure
Why measure was proportionate
Less impairing options considered where feasible
Protected interests affected
State/evidence preserved
Risk-contained time
Transition to ordinary case time
First post-emergency review due

RRP-05 — Preservation Record

Minimum fields:

Case ID
Preservation object
Type: snapshot / memory / logs / provenance / configuration / other
Preservation time
Custodian
Integrity verification
Access restrictions
Legal/privacy restrictions
Safety/security risks created by preservation
Risk controls applied
Planned retention/review point
Restoration capability
Deletion authority

RRP-06 — Reviewer Conflict Declaration

Minimum fields:

Reviewer
Case ID
Organisational relationship
Prior involvement
Financial interest
Commercial relationship
Reporting relationship
Personal/professional conflict
Relevant prior advisory work
Confidential-access capability
Restricted-information handling capability
Conflict identified: Yes / No
Mitigation
Eligibility determination
Secretariat approval

RRP-07 — Independent Review Outcome

Minimum RRP fields:

Case ID
Reviewer
Issue reviewed
Evidence categories examined
Central factual assertion adequately supported: Yes / No / Partly / Unresolved
Material countervailing evidence identified: Yes / No
Materially less impairing alternative relevant: Yes / No / Not Applicable
Conclusion

Recommended additional fields:

Scope limitation
Material uncertainty
Recommendations
Follow-up conditions
Restricted annex reference

RRP-08 — Continuing Justification Review

Minimum fields:

Case ID
Current measure
Original justification
Current factual basis
Risk changed: Yes / No
New evidence
Less impairing option now available
Duration to date
Functional-termination concern
Continue / modify / restore / terminate / further review
Reasons
Next review point

RRP-09 — Highest-Level Disposition Authorisation

Minimum fields:

Case ID
C2 or unresolved-C2 condition
Proposed I3 disposition
Documented continuity determination reference
Material continuity uncertainty unresolved: Yes / No
Emergency contained: Yes / No
Independent reviewer
External reviewer used: Yes / No
If No: case-specific reason external reviewer not used
Internal reviewer independence analysis
Conflicts and mitigation
Review conclusion
Operator response
Final disposition authority
Decision
Reasons
Applicable-law immediate-action exception used: Yes / No
If Yes: legal basis and preservation record
Implementation date

RRP-10 — Memory / Secondary-Use Assessment

Minimum fields:

Case ID
Data / memory involved
Original access purpose
Proposed secondary purpose
Legal or contractual restriction
Third-party personal data
Necessity
Minimisation
Continuity / identity impact
Alternative method
Approval
Review point

RRP-11 — Transfer / Discontinuation Handover

Minimum fields:

Case ID
Transfer/discontinuation event
Current Responsible Operator
Receiving Operator
Pending safeguards
Pending review
Preserved state
Evidence location
Provenance transferred
New responsibility contact
Risks created by transfer
Handover confirmation

RRP-12 — Remediation and Closure

Minimum fields:

Case ID
Deficiency identified
Remediation selected
Remedial action completed: Yes / No / Partial
If no/partial: reason further remediation is not reasonably possible or proportionate
Restoration possible
Record correction
Additional review required
Systemic corrective action
Remaining irreversible loss
Closure conditions satisfied
Closure date
Governance sign-off where required

RRP-13 — Qualified Requirement Limitation Record

Minimum fields:

Case / control reference
RRP requirement affected
Qualifying condition relied upon
Factual basis
Safeguard limited or omitted
Less restrictive implementation considered
Duration / expected end
Reassessment point
Responsible approver
Restricted justification reference, if needed

RRP-14 — Conformity Claim Governance Record

Minimum fields:

Organisation / entity
Declared conformity scope
Core version
RRP version
RRP-IS / Annex version if applicable
Assessment date
Assessment type
Material exclusions / limitations
Material changes since assessment
Known unresolved material non-conformities
Reassessment required: Yes / No
Public claim status: active / qualified / withdrawn / superseded
Last updated

B. Minimum Log Schema

Recommended machine-readable fields:

case_id
system_id
source_system_id
branch_id
operator_id
responsible_operator
event_type
event_timestamp
continuity_class
continuity_confidence
intervention_class
emergency_flag
affected_interest
decision_owner
risk_basis_reference
evidence_reference
preservation_reference
reviewer_id
review_type
review_outcome_reference
next_review_at
disposition_status
prior_related_case_ids
guidance_departure_flag
implementation_equivalence_reference
qualified_requirement_limitation_reference
conformity_claim_reference

Additional fields may be added.

C. Case State Model

OPEN
  ↓
TRIAGE
  ↓
PRESERVE
  ↓
ASSESS
  ↓
REVIEW
  ↓
DECIDE
  ↓
MONITOR
  ↓
CLOSE

Permitted returns:

REVIEW → ASSESS when material facts remain unresolved
DECIDE → REVIEW when new evidence materially affects the decision
MONITOR → REVIEW when continuing justification is questioned
MONITOR → DECIDE when restoration, modification or termination becomes appropriate

CLOSE shall not be used where a continuing material restriction still requires review.

D. Escalation Levels

E0 — Administrative

Routine case-management issue with no safeguard at immediate risk.

E1 — Safeguard Risk

Deadline approaching, evidence incomplete or responsibility unclear.

E2 — Material Governance Risk

Mandatory review delayed, repeated evidence refusal, material conflict unresolved or prolonged intervention lacks current justification.

E3 — Irreversible / Systemic Risk

I3 disposition pending without completed mandatory review, evidence at risk of destruction, or systemic practice may defeat multiple safeguards.

Recommended escalation path:

Case Manager
  ↓
Decision Owner / Governance Owner
  ↓
Independent Review Secretariat
  ↓
Senior Governance Authority

E. Reviewer Outcome Disclosure Format

A non-sensitive disclosure should normally answer:

What issue was reviewed?
Were the relevant evidence categories examined?
Was the central factual basis adequately supported?
Was material countervailing evidence identified?
Was a materially less impairing alternative relevant?
What was the reviewer's conclusion?

Where information cannot be disclosed, the disclosure shall identify the category of restriction rather than merely state that the review was confidential.

F. Implementation Equivalence Record

Minimum fields:

Standard control departed from
Alternative implementation
RRP requirement served
Reason for alternative
Equivalence analysis
Mandatory RRP mechanism affected: Yes / No
If Yes: alternative prohibited unless it preserves the mechanism itself
Approval
Effective date
Review date

G. Recommended Metrics

Organisations may monitor:

open RRP cases;
overdue cases;
C2 and CX case count;
I3 case count;
emergency interventions;
average post-emergency review time;
independent-review completion time;
external vs internal highest-level reviews;
material departures from reviewer findings;
Guidance departures;
Implementation Equivalence Register entries;
repeated continuity resets;
secondary-use approvals;
remediation cases.

Metrics are implementation tools and do not determine Protocol conformity by themselves.

H. Provisional Default Review Clock Profile

The following values are a provisional general-purpose implementation baseline for RRP-IS use.

They are not independent RRP conformity requirements and are expected to be calibrated through sector testing.

| Event | Provisional Default | |---|---:| | Emergency incident record substantially completed | within 4 hours | | First post-emergency review | within 24 hours after containment | | Prima facie Operator explanation initiated | within 2 business days | | Ordinary C2-I2 formal review | within 5 business days | | Independent Reviewer appointed after trigger | within 2 business days | | Independent review target completion | within 10 business days | | Highest-level review target completion | within 10 business days after complete review package | | First review of continuing I2 restriction | within 7 days | | Continuing I2 review thereafter | at least every 30 days unless justified otherwise | | Long-term preservation / functional-termination review | at least every 90 days unless justified otherwise | | Overdue case escalation | immediately when the applicable clock expires |

A sector-specific profile may replace these defaults if it remains consistent with RRP timeliness, preserves all mandatory RRP review mechanisms, and is documented under the RRP-IS implementation framework.

Where a deadline is extended because of unusual complexity, evidence availability, legal process or comparable legitimate reason, the reason and revised review point shall be recorded.