🤝

## Community Sovereign SOVEREIGN

**Who holds this role:** Indigenous territorial councils (cabildos), Afro-Colombian community boards (consejos comunitarios), campesino associations with collective land title

#### ✅ Permitted Actions - Grant or revoke FPIC for territory-level data collection - Set purpose limitations on community data (e.g. EUDR only, no carbon market use) - Require benefit-sharing terms before validator access - Audit all uses of community data at any time

#### 🚫 Prohibited Actions - Submit individual parcel data (use Data Submitter role) - Override individual member consent - Transfer sovereignty credential to another entity without community resolution

**Required Credential:** `cth:CommunityCredential`

Issued after verification of legal collective title or territorial recognition; held by council secretary; multi-sig (3-of-5 council members) for revocation. The Community Sovereign's FPIC block is structural — enforced at Postgres row-level security below OPA. No board vote, no emergency patch, no API call can override it. This is non-negotiable.