How a jurisdiction team invites a panel of practitioners to verify a ready Seed Role and reaches a recorded, exportable consensus.
A verification round is a structured way for invited practitioners to confirm — relationship by relationship — that a Seed Role is right for their jurisdiction. The round emits a signal, never a write: consensus produces an editorial worklist that the authoring team applies in the Role Builder.
This journey is for round owners (the jurisdiction team running the round) and the panelists they invite. It assumes the role has already been authored to ready — see the Seed Roles journey for that.
One mechanism covers Delphi studies, online workshops and focus groups — the method is a label and a cadence. A round runs through the same seven steps every time.
A panelist casts exactly one verdict per relationship. The unit of verification is the relationship — does this profile belong to this role, this item to this profile — not a flat checklist.
A missing relationship is not a verdict. A panelist who spots one proposes it as a new ballot target, and other panelists then cast verdicts on the proposal in the same round.
Consensus is computed by a deterministic function when the round closes — the same inputs always yield the same outcome, with no model in the loop. For each relationship it looks only at the verdicts that were cast (abstentions are set aside) and applies two thresholds: a quorum, a minimum number of responses, and an agreement threshold, the share that must agree. The defaults are five responses and seventy per cent agreement.
A relationship clears as confirmed or rejected when both thresholds are met. If the quorum is not met it is recorded as no consensus — a common, actionable state, not a failure: the owner can extend the window or re-invite. An adjust outcome is a plurality, never a decision: the worklist shows the full spread of suggested values (for example IRI 3 from five panelists, IRI 4 from four) and the authoring team picks.
Panelists are invited and attributed: every verdict is named internally so the owner and a sponsoring body can see who voted which way and read the reasoning. This is what makes the round auditable.
Public attribution is opt-in. By default a published or shared result shows the aggregate only — "verified by 18 panelists" — and a panelist's name appears publicly only if they have opted in. The internal attributed view and the public aggregate view are kept separate.
Every closed round is preserved as a verification record — a deterministic export of the whole round: the roster, every relationship and its frozen snapshot, every verdict with its comment and timestamp, and the computed consensus with the full distribution.
A sponsoring research or professional body can request the full attributed record for a round. The export is deterministic — re-deriving it always produces the same bytes — and a public consumer receives the aggregate view, respecting each panelist's attribution choice.
On close, an immutable copy of the record is archived and its SHA-256 hash is stored. A body can keep the record independently and prove it is unaltered by re-deriving the export and matching the hash — lightweight tamper-evidence, without cryptographic signing.
A verification round needs a ready Seed Role. Authoring a Seed Role end-to-end is covered in its own journey.