{"schema_version":1,"experiment_id":"eoa_inverse_innovation_exp06_four_proposal_generalization60_20260803","cell_id":"ritualized_meaning_and_commitment_enactment__human_computer_interaction","arm":"COMPLETE_PROPOSAL_PORTFOLIO","candidate_id":"hci_household_listening_boundary_walk_v0","proposal_index":2,"version":0,"title":"The Listening Boundary Walk: Recurring Household Consent for Ambient Systems","problem":"In a home containing microphones, cameras, presence sensors, connected displays, or automated routines, the purchaser's one-time configuration can outlive the circumstances under which other residents, caregivers, children, or regular visitors accepted it. Device additions, household turnover, changed care needs, and software updates can alter what is sensed or retained without creating a shared occasion for affected people to reinterpret and renew the household's boundaries.","actors":["Residents who administer devices","Residents without account or configuration access","Children or dependent adults represented according to their capacity and applicable authority","In-home and remote caregivers","Regular visitors or workers affected by sensing","Device or home-automation service provider","Rotating household steward","Independent facilitator or advocate when power asymmetry warrants one"],"observable_state":"Affected household members give conflicting accounts of which devices sense which rooms, cannot identify the current retention or sharing rules, or discover that a former resident, obsolete routine, newly added sensor, or changed service still has access. A person can state a boundary such as no audio capture in a bedroom or no remote viewing during private hours, yet no corresponding configuration or unresolved-conflict record exists.","consequence":"Ambient computing can operate under stale or unilateral permission, interpersonal disagreement remains hidden until a breach or conflict, and people with less technical or household authority bear consequences they did not meaningfully help govern.","affected_objective":"Legible, revisable, multi-person consent and stewardship for ambient sensing, automation, retention, and remote access within a shared home.","intervention":"Establish a recurring Listening Boundary Walk, conducted every three months and whenever a resident, caregiver, sensing device, or material data practice changes. The home first enters a marked review state: nonessential sensing pauses, participating devices display an accessible review signal, and the steward states the contestable meaning claim that sensing in shared space is borrowed permission rather than a permanent entitlement. Participants then traverse a physical, tactile, or digital map of the home. At each room and device, a humble token or equivalent accessible control passes among affected people, granting each a turn to renew, revise, decline, defer, or privately record boundaries for sensing, inference, retention, notification, and remote access. No unison affirmation is requested. Closure translates agreed boundaries into configuration changes, deletion or retention tasks, named owners, deadlines, and a visible unresolved-conflict register. New or expanded sensing remains off where it lacks affected-party consent; an existing setting is not expanded while disagreement remains, subject to a separately documented safety or care plan. A short debrief captures divergent experience. Stewardship rotates, and periodic harm review can adapt, repair, pause, or retire the practice.","structural_mapping":[{"archetype_element":"Explicit and contestable meaning claim","domain_realization":"The recurring practice frames household sensing as permission held in stewardship, while allowing participants to reject that framing or propose a different account of safety, care, privacy, and convenience."},{"archetype_element":"Participant and stakeholder boundary","domain_realization":"The design distinguishes device administrators, sensed residents, dependents, caregivers, visitors, remote viewers, absent data subjects, and facilitators rather than equating account ownership with standing."},{"archetype_element":"Legitimacy, consent, and exit","domain_realization":"Notice, private responses, pass options, advocates, role substitution, and nonretaliatory exit are defined before the event; silence and continued residence are not treated as consent."},{"archetype_element":"Ritual time, trigger, and place","domain_realization":"The observance recurs quarterly and after household or system changes, using the home map and affected rooms as its setting rather than appearing as a generic device notification."},{"archetype_element":"Symbolic threshold","domain_realization":"Pausing nonessential sensing marks a temporary reversal: the system that normally observes the household becomes the object of collective observation."},{"archetype_element":"Recognizable script and roles","domain_realization":"The stable sequence is notice, access review, sensing pause, meaning statement, room-by-room boundary turns, configuration closure, debrief, and handoff; facilitator and stewardship roles rotate."},{"archetype_element":"Marked object or gesture","domain_realization":"A low-status physical, tactile, or digital token makes the right to speak, pass, or register a private boundary visibly travel among affected people without becoming a privileged household artifact."},{"archetype_element":"Embodied and plural participation","domain_realization":"Participants may move through rooms, use a seated or remote map, manipulate accessible controls, speak, write privately, appoint an advocate, or decline a turn."},{"archetype_element":"Recognition, commitment, and practical closure","domain_realization":"The household recognizes each expressed boundary as a claim with standing, then connects accepted commitments to actual settings, deletion tasks, owners, and deadlines."},{"archetype_element":"Accessibility and emotional-safety envelope","domain_realization":"The practice avoids forced disclosure about abuse, disability, health, or interpersonal fear; it offers asynchronous participation, interpretation, screen-reader and tactile paths, support persons, and a private escalation channel."},{"archetype_element":"Memory across turnover","domain_realization":"A minimal, versioned boundary record preserves device scope, decisions, dissent, provenance, revisions, and stewardship handoffs without storing sensitive reasons for a person's choice."},{"archetype_element":"Drift, repair, and retirement","domain_realization":"Debriefs and audits test whether settings still match the enacted boundaries, while a defined process can correct records, disable contested signals, transfer unfinished tasks, or end the observance."}],"mechanism_mapping":[{"mechanism_slug":"ritual_design_canvas","role":"Co-locates the household's meaning claim, affected parties, room and device scope, sequence, symbols, safety exceptions, practical outputs, and retirement conditions.","counterfactual_removal":"Without the canvas, the event could become an attractive privacy exercise without a stable relationship between its symbolic acts, legitimate standing, and configuration consequences."},{"mechanism_slug":"ritual_access_and_consent_review","role":"Applies veto points for household coercion, accessibility, dependency, language, private disclosure, visitor standing, recording, and the adequacy of exit or advocacy paths.","counterfactual_removal":"Without it, account ownership, caregiving authority, financial dependence, or continued residence could be misread as permission to participate or be sensed."},{"mechanism_slug":"opening_marking_and_threshold_gesture","role":"The temporary sensing pause and accessible device signal distinguish ordinary operation from the interval in which the household examines and governs that operation.","counterfactual_removal":"Without the reversal and marked threshold, the activity becomes another settings walkthrough and loses the shared recognition that sensing permission is under review."},{"mechanism_slug":"symbolic_object_circulation","role":"A circulating token or accessible equivalent assigns a visible turn to each affected person and lets them speak, pass, defer, or choose private input.","counterfactual_removal":"Without controlled circulation, the device purchaser or most technically confident resident could dominate interpretation and configuration while quieter boundaries remain invisible."},{"mechanism_slug":"collective_commitment_renewal","role":"Requires existing household boundaries to be actively renewed, revised, declined, or deferred after time and system changes rather than silently inherited.","counterfactual_removal":"Without recurring re-consent, yesterday's settings remain presumptively legitimate even when residents, relationships, devices, or data practices have changed."},{"mechanism_slug":"silence_reflection_and_lament_interval","role":"A short, framed pause before choices allows private recognition of discomfort, prior boundary failures, or conflicting care needs without requiring disclosure.","counterfactual_removal":"Without protected reflection, immediate group discussion may let powerful participants define convenience or safety before others can formulate a boundary."},{"mechanism_slug":"role_rotation_and_stewardship_rite","role":"Rotates facilitation and transfers the home map, device inventory, configuration access needed for the review, open tasks, and procedural knowledge.","counterfactual_removal":"Without transfer of actual capability, the purchaser or technically skilled founder remains the permanent interpreter and gatekeeper despite nominal participation by others."},{"mechanism_slug":"after_ritual_meaning_debrief","role":"Compares intended and experienced meaning immediately after the observance, including whether anyone felt pressured, unheard, exposed, or unable to use the participation path.","counterfactual_removal":"Without the debrief, the settings record can appear complete while coercion, exclusion, confusion, and unresolved disagreement disappear from the household memory."},{"mechanism_slug":"ritual_drift_and_harm_audit","role":"Periodically compares recorded boundaries with device behavior and checks for rote participation, administrator capture, unsafe disclosures, ignored dissent, and symbolic substitution for technical controls.","counterfactual_removal":"Without skeptical review, the household could repeatedly perform consent while devices or power relationships continue to violate the enacted boundaries."},{"mechanism_slug":"ritual_retirement_or_repair_ceremony","role":"Provides a transparent way to acknowledge a failure, correct or restrict the record, disable contested ritual signals, transfer unresolved technical obligations, and end required observance.","counterfactual_removal":"Without an ending path, the practice could persist as a coercive household tradition or be abandoned while live sensing and unresolved obligations remain."}],"causal_chain":["A device inventory and spatial data-flow map make ambient sensing and remote access jointly inspectable rather than privately inferred.","A pre-observance review identifies affected parties, accommodations, authority limits, private channels, and conditions requiring an advocate or hold.","Pausing nonessential sensing creates a recognizable threshold in which the home's ordinary observer-observed relationship is temporarily reversed.","Room-by-room enactment connects abstract privacy, care, and convenience claims to concrete places, devices, times, and people.","Circulating turns distribute standing beyond the account holder and permit explicit renewal, revision, refusal, deferral, or private response without manufactured unanimity.","The unresolved-conflict rule prevents new or expanded sensing from acquiring legitimacy merely through delay, silence, or technical default.","Closure converts socially witnessed boundaries into device settings, access removal, retention actions, owners, and deadlines.","The minimal record, rotating stewardship, debrief, audit, repair, and retirement paths preserve accountability while allowing the household and system to change."],"baseline":"Ambient devices are configured separately through administrator accounts, per-device dashboards, installation prompts, hardware mute controls, and occasional privacy notices. Other affected people may express preferences informally, but the system provides no recurring, collectively legible occasion that revisits household standing, conflicts, and cross-device commitments after circumstances change.","nearest_rivals":["A unified privacy dashboard: stronger for efficient inspection and configuration, but usually addresses an authenticated individual and does not itself establish whose consent has standing or how household disagreement is renewed and witnessed.","Recurring consent notifications: stronger for scalable reminders, but private clicking can become habituated and does not create a shared interpretation of spatial, relational, or caregiving boundaries.","Hardware shutters, mute switches, and local kill controls: stronger for immediate and verifiable interruption of a particular sensor, but they do not coordinate cross-device rules, retention, remote access, memory, or household commitments.","A conventional household meeting: capable of plural discussion without product mediation, but its agreements may remain informal and disconnected from opaque device configuration and data flows.","Automated policy recommendations or privacy-preserving defaults: stronger for reducing configuration burden, but they cannot determine legitimate household meaning, resolve interpersonal standing, or treat refusal as a socially governed commitment.","Individual device onboarding: useful for first-use comprehension, but it is episodic, purchaser-centered, and structurally weak against turnover and changing relationships."],"remaining_contrastive_claim":"The contrastive hypothesis is that recurring, symbolically marked household enactment can make distributed standing, disagreement, and re-consent socially legible and translate them into cross-device obligations. This is narrower than claiming that ritual improves privacy and differs structurally from presenting one administrator with better notices, defaults, or settings.","authority_safety":{"decision_authority":"Existing account holders retain only the technical authority their systems grant them; the observance does not enlarge it or confer authority over another person's disclosure. Each affected person controls their own participation and private response. Applicable guardians, caregivers, property holders, and safety plans retain their lawful responsibilities, while the independent facilitator may pause the practice for coercion or unsafe participation. The device provider may implement authenticated configuration changes but cannot infer household consent from attendance.","authorized_first_step":"A volunteer household may rehearse the complete sequence using a paper or sandboxed digital home map, fictionalized data flows, and inactive configuration controls. The rehearsal may test standing, accessibility, script comprehension, conflict handling, and closure artifacts without changing live sensing.","excluded_actions":["Changing live device settings during the initial rehearsal","Treating silence, continued residence, dependency, attendance, or use of the home as consent","Requiring disclosure of disability, health, abuse, immigration status, family conflict, or reasons for a boundary","Giving children, dependents, visitors, or caregivers an illusory choice when another party can retaliate","Allowing a majority vote to authorize sensing in another person's private space","Expanding sensing while a relevant objection remains unresolved","Disabling safety-critical monitoring outside the separately authorized safety plan","Recording the observance or retaining private responses without specific consent","Using culturally specific sacred symbols or language without legitimate standing","Substituting the observance for secure device design, authentication, encryption, hardware controls, or legal compliance"],"halt_rollback":"Any participant may pass, leave, or move to private input without explanation. The facilitator must halt for retaliation, inaccessible participation, disputed authority, unsafe disclosure, unexplained device behavior, or conflict with a documented care plan. Rollback ends the marked state, restores only the previously verified configuration, leaves new or expanded sensing disabled, quarantines sensitive rehearsal records, routes safety issues to the existing responsible authority, and records unresolved technical work without recording private reasons."},"negative_tests":{"strongest_counterevidence":"All affected people can already identify and independently control relevant sensing, retention, and remote access; system records reliably show that configuration matches their current boundaries after household and device changes; and private reports reveal no missing standing, memory, or conflict that collective enactment would address.","problem_falsifier":"Across a bounded audit after resident, caregiver, device, and software changes, affected parties give consistent accounts of sensing and access, every expressed boundary maps to a verifiable control, stale identities and permissions are absent, and existing processes provide safe reconsideration without relying on one administrator's memory.","intervention_falsifier":"The enactment produces conformity pressure, interpersonal retaliation, unsafe disclosure, ritualized majority rule, or configuration artifacts that do not match participant choices. It is also falsified as the appropriate intervention if a dashboard or technical control alone resolves the observed gaps while the symbolic and collective elements add no needed standing, memory, or practical obligation.","risks":["Household power asymmetries could make visible refusal unsafe.","A map presented as complete could conceal unknown sensors, inferences, cloud processing, or remote access.","The device purchaser could retain practical control despite rotating stewardship.","Children or dependent adults could receive symbolic voice without effective protection.","The sensing pause could create false confidence if devices continue collecting data.","Private reasons could leak through the pattern of room-level choices.","Convenience or care narratives could be used to override dissent.","Repeated observance could become rote consent theater.","The ceremony could substitute for secure engineering and enforceable controls.","A restrictive default could conflict with a legitimate safety need if the safety plan is incomplete." ]},"next_evidence_step":"Following a successful sandbox rehearsal, conduct one consent-reviewed cycle with a small set of volunteer households using an instrumented test environment rather than production accounts. Compare preexisting and post-enactment maps for identification of stakeholders, sensors, remote viewers, boundary conflicts, configuration actions, owners, and unresolved items. Verify each closure artifact against simulated device behavior, collect optional private reports immediately and after a short delay, and require the independent facilitator to issue a proceed, adapt, hold, or retire verdict. This tests feasibility, causal steps, and safety signals without estimating general effects.","prior_art_status":"UNSEARCHED","diversity_from_prior_proposals":"Proposal 1 addressed continuity of professional user-impact commitments inside a product team's release governance and acted through witnessed role-specific renewal before software shipment. This proposal addresses stale and unequal consent among people living with already deployed ambient systems. Its intervention is a recurring, spatial household boundary enactment tied directly to sensing, retention, and remote-access configuration; its causal path runs from invisible multi-person data practices through room-level standing and conflict disclosure to verifiable household controls. It is independently adoptable by a household or ambient-system provider and neither extends nor depends on the release-stewardship intervention.","revision_record":{"parent_version":null,"progress_targets_addressed":["Materially different HCI problem from proposal 1","Distinct household and ambient-computing intervention","Recurring symbolic enactment with practical configuration closure","Multi-person standing, consent, accessibility, and power safeguards","Strong rivals and contrastive falsifiers","Bounded first evidence without general effect claims"],"conceptual_changes":[],"operational_changes":[],"evidence_changes":[],"claim_changes":[]}}