White paper for ITCoP.org: Transparency by Default. The Internet Transparency Stack, co-regulated identification, and Operational Transparency for AI

By Mark Lizar and Michele Drgon / Transparency and Consent Interoperability Expert Group (TCIEG) / Version 0.1 for external review, 31 August 2026

Executive summary

The internet runs on a promise. Accept the policy, hand over the data, and trust that accountability exists somewhere behind the interface. That promise is now failing in public, because artificial intelligence banks human knowledge at a scale no privacy policy was written to govern, and because personal data crosses borders faster than any regulator can follow it.

The question a person should be able to answer before identifying themselves, is who is accountable for this, for what purpose, under what authority, and where does my personal information go. Currently there are no answers that anyone can inspect.

This paper sets out the correction in three connected parts.

• The Internet Transparency Stack is a layered reference architecture that runs from law or treaty obligation down to machine readable record, and from record back up to regulator. It locates the missing layer precisely: the connection between a conformant consent record and the law or treaty obligation it is supposed to satisfy.
• Co-regulated identification is what that architecture makes possible at the point of interaction. Two rule sets operate on the same identifier, the organisation's own rules and the public rules of treaty, law and standards, with the public rules expressed as a record structure that can be inspected before identification is demanded.
• Operational Transparency for AI applies the same mechanism to systems deployed by many parties across many jurisdictions. Every participant gives notice for the scope of work it performs, and that notice becomes the input the next participant builds against and tests.

The common element is a record generated by the operation rather than a document written about it afterwards. Transparency that cannot be checked is merely a promise. Transparency that produces a record is evidence.

None of this requires a new protocol, a new identification technology, or the disclosure of trade secrets, model weights or dataset contents. It requires that the governance record about a data flow be as portable as the data flow itself.