Skip to content

Research output disclosure checklist

Planning aid, not a certification or legally sufficient compliance document. Complete in an approved private documentation location. Never insert credentials, key material, or actual restricted records. Unknown required controls block approval.

  • Project / nonsensitive identifier: [fill in]
  • Prepared by / accountable owner: [fill in]
  • Version / date / next review: [fill in]
  • Classification and agreement references: [fill in]
  • Approved evidence location: [fill in]

Release inventory

Artifact / version / trusted digest Audience / destination Initial class Reviewer Decision / conditions Approval evidence
[fill in]

Review each artifact and the combined release

  • No direct identifiers, credentials, keys or linkage tables.
  • Indirect identifiers and linkage to external public datasets assessed.
  • Coordinates, map resolution, dates and private property inference assessed.
  • Small cells, rare categories, outliers and differencing across releases assessed.
  • Model predictions, parameters, embeddings and reconstruction risks assessed.
  • Notebook outputs, checkpoints, logs, filenames and metadata reviewed.
  • Suppression, coarsening or other controls justified for this risk; no universal threshold assumed.
  • Agreements, consent, licensing and attribution checked.
  • Restricted outputs encrypted; audience permissions and restore verified.

  • Residual risk and named custodian/institutional release authorization recorded.

  • Disclosure controls applied and supporting reasoning: [fill in]

  • Related past releases and cumulative risk: [fill in]
  • Rejected artifacts and remediation: [fill in]

Review and authorization

  • Unresolved controls / remediation owner / due date: [fill in]
  • Exceptions, approving authority, scope, and expiry: [fill in]
  • Custodian decision / date / evidence reference: [fill in]
  • Institutional decision / date / evidence reference: [fill in]
  • Provider confirmation references: [fill in]
  • Material changes requiring revalidation: [fill in]

For each control, record Supported, Configured, Verified, and Approved separately, with dates and evidence. Do not mark unknown as passed.