Demonstration — Synthetic Data

Admin Demo. Synthetic aggregates only. No identities, IDs, rows or free text exist in this view.

Admin Demo · Researcher role (simulated)

Research operations

What a researcher would see: group- and wave-level aggregates only. There is no respondent drill-down by design.

Wave-level completion

Wave	Invited	Completed	Rate
Baseline	640	640	100%
Day 90	640	530	83%
Day 180	530	472	74%
Day 270	472	436	68%
Day 365	436	368	57%

Invited = respondents eligible at the previous wave (simplified for demo).

Group-level aggregates

Group by

Group	Invited	Baseline	Day 90	Day 180	Day 270	Day 365	LS baseline	LS day 365
90-day Mentorship	389	389	311	273	249	213	5.88	6.38
18-month Practitioner Accreditation	93	93	85	78	73	59	6.06	6.88
12-month Trainer Certification	158	158	134	121	114	96	5.89	6.35

Minimum cell size 10. When one cell is suppressed, the next-smallest is also suppressed so it cannot be derived from totals.

Production readiness checklist

☐ Authentication & role-based accessNot enabled
☐ Database with row-level securityNot enabled — schema designed only
☐ Identity bridge service (isolated)Not built
☐ Consent records (versioned, timestamped)Not enabled
☐ Real survey storageDisabled — demo uses browser storage only
☐ Reminder / follow-up email deliveryDisabled — no emails sent
☐ Audit loggingDesigned; not enabled
☐ DPIARequired — not started
☐ Legal review of privacy noticePending
☐ WHO-5 licensing & translation verificationTo do
☐ OECD item wording verificationTo do
☐ Pre-registrationNot registered
☐ Ethics / independent review routeTo be determined
☐ Independent adviser, statistician, DPO appointmentsPending
☐ Penetration test & security reviewNot done
☐ Production deploymentDisabled

Live enrolment mode Send real reminders Accept real submissions

Production modes are disabled until the checklist is complete and independently reviewed.

Instrument licensing to-do

☐ WHO-5: confirm licence terms and attribution with rights holder
☐ WHO-5: obtain or verify official translations (Dutch, German, others)
☐ OECD items: verify wording against current Guidelines (incl. pain and eudaimonic items)
☐ Cantril: confirm canonical wording and translations
☐ Journey items: cognitive testing and psychometric plan

Audit log (sample)

2028-01-14 09:12Viewed aggregate dashboard: completion by programme · researcher role
2028-01-14 09:15Exported aggregate CSV (suppression applied) · researcher role
2028-01-13 16:40Follow-up scheduler: wave reminders queued (count only) · coordinator role
2028-01-12 11:02Instrument version JLIS-core v0.3 published · admin role

Logs record role and action only; no participant identifiers.

Data architecture (designed, not deployed)

┌──────────────────────┐     ┌────────────────────────┐     ┌──────────────────────────┐
│ IDENTITY STORE       │     │ IDENTITY BRIDGE        │     │ RESEARCH STORE           │
│ contacts (email,     │────▶│ protected service only │────▶│ responses keyed by       │
│ name, language)      │     │ maps contact ↔ study   │     │ pseudonymous study_code  │
│ consent_records      │     │ code; no admin access  │     │ no names / emails        │
└─────────┬────────────┘     └────────────────────────┘     └────────────┬─────────────┘
          │                                                               │
          ▼                                                               ▼
┌──────────────────────┐                                     ┌──────────────────────────┐
│ FOLLOW-UP DELIVERY   │                                     │ AGGREGATE VIEWS          │
│ due dates + contact  │                                     │ security-definer funcs,  │
│ only; NO responses   │                                     │ n ≥ 10, complementary    │
│ (coordinator role)   │                                     │ suppression (researcher) │
└──────────────────────┘                                     └──────────────────────────┘

participant role: RLS allows reading/writing only own responses via bridge-issued session; can export and withdraw.
researcher role: no SELECT on responses table; reads only aggregate functions that enforce n ≥ 10 and return no keys.
coordinator role: reads schedule + contact for reminders; no access to responses.
admin role: manages instruments and roles; still no identity or response row access. Roles stored in a separate table, checked server-side.
Every read of the bridge and every export writes an audit row. Consent records are append-only and versioned.
Longitudinal research data is pseudonymised. Only published aggregates are intended to be anonymous; we do not claim irreversible anonymity.
Demo dataset (seeded, deterministic) is generated in code and could never be merged with future real submissions, which would live in a separate store.