Consent Registry

The canonical per-subject consent-and-suppression SSOT for email — the offer-claims-registry analog for the email discipline, and the record the SEND S2 (list consent integrity) and N1 (unsubscribe / opt-out honored) vetoes are judged against. It CURATES the consent record — registry, not gate: no class: auditor, no cap fields, no veto scoring, no EQS roll-up. It stores dated facts and an append-only event history; email-quality-auditor judges S2/N1 against those facts, exactly as ad-account-auditor judges O1/O2 against the claims ledger. Register vs judge is the same seam as offer-claims-registry vs the auditor.

One durable record per subscriber/prospect holds: current subscription status (subscribed / unsubscribed / suppressed / never-opted-in), the opt-in timestamp and its lawful basis (consent / legitimate-interest / contract — GDPR Art 6; note that for marketing to individuals, ePrivacy / PECR normally still requires opt-in consent regardless of the Art 6 basis — record the stated basis, do not adjudicate send-legality), double-opt-in confirmation proof when present, the acquisition source (form, checkout, import, event, list purchase), and an append-only history of unsubscribe / bounce / complaint / re-subscribe events, each dated with its source. The registry registers, reconciles, and versions the record; it never scores, gates, or suppresses a send.

Scope seams — who keeps what:

• The S2 and N1 verdicts stay with email-quality-auditor; this registry supplies the consent facts and the opt-out event history — never a pass/fail or a "clean list" label. No record on file = NEEDS_INPUT, not pass-by-default (the same red line as the S2 row in SEND).
• Applying suppression — turning "unsubscribed / bounced / complained" into an exclusion segment — stays with list-segment-builder; this registry owns only the per-subject facts it reads.
• Authentication (SPF/DKIM/DMARC) and inbox-placement facts stay with deliverability-qa; this registry does not touch DNS or the DMARC RUA report — it owns list-consent integrity only, the other half of SEND-S.
• Marketing claims and offer terms stay with offer-claims-registry; brand/entity identity facts stay with entity-optimizer. This registry owns consent and suppression state only.
• Archival stays with memory-management — the sole WARM → COLD executor; records retire on consent withdrawal / suppression, never on a timer.

Quick Start

Record opt-in for jane@example.com — form signup 2026-06-14, double-opt-in confirmed, basis: consent