One physical garment has no more than one current owner.
Historical periods remain append-only. A valid transition closes the prior current period and creates the next atomically.
Foundation / Ownership
A secure scan may verify a physical product. A successful authorized Claim, completed approved transfer, or another approved reason-coded event is what creates or changes zHezar’s platform Ownership record.
Reference only. No product, scan, Claim, owner, username, transfer, Collection, correction, evidence file, or Ownership record is represented here.
Identity / verification / event / authority
Current evidence
The repository specifies invariants, protected service boundaries, and public privacy constraints. It does not evidence an issued Product Identity, live token, completed Claim, current owner, approved transfer workflow, or public record activation.
Historical periods remain append-only. A valid transition closes the prior current period and creates the next atomically.
OD-016 remains Draft, so no username, history, optional Collection, public field, or ownership control is invented.
Six distinct layers
Each layer answers a different question and must remain independently validated.
Stable garment, Edition, unit, and lineage relationships survive token replacement and ownership change.
A live server result may establish token and product authenticity—not Ownership by itself.
Possession may support a Claim, transfer, dispute, or service case, but cannot overwrite the record.
A validated operation may create the first Ownership record only when every required condition passes.
The current OwnershipRecord linked to the active physical identity and permanent account reference is authoritative.
A limited projection may explain approved history; it never becomes the source of Ownership authority.
Fourteen non-authority signals
Any of these may support fulfillment, review, a dispute, or an approved workflow. None creates or changes platform Ownership alone.
Six historical roles
These relationships can belong to different accounts over a product’s life. Public presentation must label them accurately and reveal only the approved privacy-safe projection.
May differ from the first claimant when a separately approved gift workflow applies.
The account that finished the protected first-Claim process.
This role remains historical after a later valid transfer.
Discovery does not automatically mean purchaser or current owner.
Profile visibility or scanning activity does not add or remove this authority.
The historical relationship remains, but owner-only authority has ended.
Authorized first Claim
The server revalidates current authority at the mutation boundary. Prior evidence or a successful screen is not enough.
The authorized account and any approved gift relationship are resolved.
Order, return, cancellation, payment, fraud, legal, security, and ownership holds permit the operation.
The current active token and Product Identity validate through the authoritative backend.
The operation fails closed if ownership exists or concurrent authority cannot be resolved.
Authentication, authorization, expiry, operation identity, and current facts are checked at mutation.
The first Ownership record and required provenance are created together or not at all.
Completed transfer
A transfer remains pending until current-owner authority, the intended receiver, physical verification, eligibility, terms, holds, and final server mutation all complete.
Invitation, acceptance, payment arrangement, meeting, delivery, or a scan attempt is not a completed transition.
The prior period closes, the receiver’s current period opens, the product reference updates, and provenance records the event.
The former owner loses owner-only controls, the new owner gains them, and configured holds begin without deleting history.
Public and protected
OD-016 remains Draft. Optional public Collection and historical-owner modules stay disabled, and the public projection uses the most privacy-preserving presentation.
Only approved fields, time precision, owner labels, profile references, and required provenance may appear.
Orders, devices, network signals, disputes, fraud review, case files, and private ownership history remain access-controlled.
Corrections, holds, and continuity
Ownership changes, revocations, restorations, and corrections require a documented approved process, evidence, authority, reason, audit history, and any required notice or appeal.
Stopping scans, leaving the platform, account inactivity, or the product leaving sale does not silently remove a completed record. Required provenance survives ordinary profile changes and deletion according to approved policy.
Public promise limits
This page creates, verifies, displays, changes, revokes, restores, or corrects an Ownership record.
A scan, static URL, screenshot, receipt, delivery, possession, or support statement establishes Ownership.
Product authenticity and physical possession automatically resolve legal title or every dispute.
A public username or profile presentation is the authoritative account or Ownership identifier.
An invitation, acceptance, payment, handoff, or scan attempt means a transfer completed.
A complaint, profile preference, inactivity, or stopped scanning silently reverses valid Ownership.
Public provenance exposes private identity, contact, address, payment, security, or evidence records.
This reference activates a Claim, transfer, Collection, marketplace, inheritance, correction, case, support, or legal process.
Readiness / July 2026
These labels describe repository readiness only and do not represent a Claim, current owner, transfer, public record, or production service.
Product, privacy, legal, security, accessibility, and content approval remain required.
Final definitions, terms, versions, acceptance, and records are required.
Issued products, approved NFC, account/order authority, holds, APIs, and support are required.
Authoritative records, concurrency, audit, reconciliation, recovery, and monitoring are required.
Approved fields, labels, privacy, retention, deletion, anonymization, and holds are required.
OD-017, recipient, physical verification, fees, disputes, holds, and operations are required.
Cases, evidence, authority, notices, appeals, audit, and safe operations are required.
Related public boundaries
Authenticity explains secure scans, Provenance explains append-only history, and Edition Integrity keeps release identity distinct.