15Privacy & surveillanceBelow the top 20
A teen account the parent cannot see, the vendor can
CapabilityDomain knowledgeImpact domainBoth
Statement (NASA form)
Given that age-gating already fails both ways, there is a possibility of intimate logs on a server, not in the house resulting in the wrong people having the diary.
Likelihood
4Likely
Consequence
3Major
Urgency
3Priority
Personal slice · privacy. Experimental household card. Not a certified finding.
Composite 15 = 4×3 + 3
Applicable mitigations
Controls · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · Short-lived, narrowly scoped tokens for every tool call · A real off-ramp that still functions · Statutory independent safety function at designated labs