Summary

  • The NRS Network Membership page says its listed members entrusted NRS to represent them in matters related to RIR governance and that each listed member provided a Power of Attorney for NRS to act on its behalf.
  • The public Membership Terms separately describe membership, resignation, termination, notices, benefits and use of member names and logos, but the two captured pages do not expose a particular mandate’s text, scope, duration, revocation state or action history.
  • A privacy-preserving scope-and-revocation ledger could separate membership, public listing and delegated authority while leaving every private instrument and every unobserved action unjudged.

A public listing makes a current-state claim

The Network Membership page does more than identify a community. Under “Trusted Representation in RIR Matters,” it says the members shown there entrusted NRS to represent them in matters related to Regional Internet Registry governance. It adds that each listed member provided a Power of Attorney for NRS to act on its behalf. The page also invites other organizations to appoint NRS to manage RIR-governance matters by contacting a relationship manager.

Those statements establish the public fact at the centre of this briefing: NRS describes a representation relationship grounded in a Power of Attorney. They do not establish the terms of any particular instrument. The captured page does not publish its execution date, the signatory’s authority, the RIR or matter covered, the acts permitted, the acts excluded, an expiry date, a revocation mechanism or a history of actions taken.

That boundary matters because a public name or logo is easy to read as a present-tense assurance. A reader may reasonably understand “represented member” to mean that authority remains effective now. Yet a static listing cannot show whether a mandate was narrow or broad, temporary or continuing, replaced by a later version, suspended for a conflict, or revoked after the page was last checked.

The answer is not to publish private Powers of Attorney. These instruments may contain signatures, contact details, internal authorisations, legal advice or sensitive descriptions of resources and disputes. The answer is to publish and retain a bounded status record that can prove the state of authority without disclosing the instrument itself.

Membership and authority are different records

The distinction begins with the Membership Terms. They say membership is personal to the entity accepted as a member and cannot be transferred. They describe voluntary resignation on fourteen days’ written notice, annual renewal, suspension or termination by NRS, return of benefits after termination and communications through the email address in Member Details or the website’s applicable contact details. They also record consent for NRS to use a registered member’s name and logo for publicity and a client list.

None of those facts answers what happens to a separate representation mandate. A member may leave while a mandate remains effective for a final bounded matter. A mandate may be revoked while ordinary membership continues. A logo may remain licensed for one purpose after authority to act has ended, or its display may simply lag a status change. The captured pages do not say which of those possibilities applies.

A governance record should therefore keep at least three states separate:

  • membership: whether the entity is an admitted member under the applicable terms;
  • public listing: whether NRS may display the entity’s name or logo and what the listing is intended to communicate; and
  • representation authority: whether a verified principal currently authorises NRS to perform specified acts in a defined RIR-governance matter.

Linking those states is useful. Collapsing them is risky. If termination automatically changes a representation mandate, the record should identify the rule or instrument that produces that effect. If it does not, the record should show the remaining scope, end condition and responsible custodian. Silence should not be converted into either permanent authority or automatic revocation.

The minimum mandate record

A durable ledger can remain compact. The private instrument stays in controlled storage; the ledger preserves the facts needed to verify its operational use.

The first entry should identify a stable mandate ID and version. It should bind the principal to the person or body that issued the authority and record how issuer authority was verified. That is not a public demand for personal data. A public view can say “issuer authority verified” with a date and method category, while the underlying evidence remains restricted.

The second entry should define scope. “RIR governance” can cover very different acts: receiving notices, attending meetings, submitting comments, requesting information, communicating a position, appointing counsel, voting where permitted, or handling a specific registry matter. The ledger should state the covered institution or matter, permitted actions and explicit exclusions. It should not imply control of address space, routing or a registry account unless the instrument actually grants a relevant power and the receiving system recognises it.

The third entry should bind time. Commencement, expiry, scheduled review and event-based termination should be distinct fields. A mandate may end on a date, on completion of a matter, on loss of issuer authority, on membership change, or upon acknowledged revocation. Recording the applicable trigger prevents an old document from becoming an indefinite operating assumption.

The fourth entry should record custody and access. It should identify where the instrument is held, who may inspect it, which version is authoritative and how its hash was calculated. A hash does not prove legal validity, but it can prove that the document presented for a later action is the version that was verified.

Every action needs its own receipt

A mandate ledger should not end at “active.” Each material action should point back to the authority that permitted it. The receipt can identify the request, requester, relevant mandate version, approving actor, conflict check, action taken, recipient, sent time and acknowledgement. Sensitive content can remain private; the operational chain still needs to be reconstructible.

This matters when authority is conditional. A principal may allow NRS to receive information but not commit the organization to a position. It may permit representation in one RIR process but not another. It may require dual approval for a vote, legal filing or change request. A single active/inactive flag cannot preserve those distinctions.

Conflict handling belongs in the same chain. Representation of several members in a governance process does not itself prove a conflict. A ledger should instead record whether a relevant conflict question was assessed, what restriction or recusal applied, who approved the disposition and whether the principal was notified. The objective is bounded accountability, not a presumption of divided loyalty.

Recipient acknowledgement is also important. Internal approval does not prove that an RIR, meeting secretariat or other institution accepted the representative’s authority for a particular act. A receipt should distinguish “authorised internally,” “submitted,” “received,” “accepted for this purpose,” “rejected” and “superseded.” Each is an observable state; none should be inferred from another.

Revocation is an event, not a deletion

Revocation should create a new event linked to the mandate, not erase the earlier record. The event needs the requesting principal, verified issuer authority, received time, effective time, scope, notice recipients and acknowledgements. If an urgent request precedes verification, the ledger can record a temporary hold without pretending the final decision has already been made.

An immutable history protects both sides. It lets a principal show when authority ended. It lets a representative show which actions occurred while a verified mandate was active. It also prevents a later correction from rewriting the evidence used for an earlier decision.

The public representation status can be smaller than the internal record. It could show the principal’s canonical name, a bounded status such as verified, review due, expired, revoked or superseded, the covered matter at a safe level of generality, the last verification date and a correction channel. It should not expose signatures, resource inventories, internal contacts or confidential instructions.

Removing a listing without history is not enough. A reader who relied on the earlier page needs to know whether the relationship ended, was corrected, or was merely removed from public display. A status transition and effective time are more informative than disappearance.

What is fact, inference and unknown

The direct facts are limited to two NRS first-party pages. The Network Membership page describes eligibility, a representation relationship, Powers of Attorney and an invitation to appoint NRS in RIR-governance matters. The Membership Terms describe membership entry and exit, renewal, benefits, notices and public use of member names and logos.

The proposed ledger is an inference and governance recommendation. The public pages do not say that NRS uses these fields, that a particular mandate has a defect, or that a particular action occurred. Separating membership, listing and authority is an accountability design, not a legal conclusion about how any instrument must operate.

Important matters remain unknown. The source set does not reveal any particular mandate’s terms or legal effect, whether NRS maintains an internal register, whether a membership change affects a separate authority, who approves an action or revocation, whether a recipient acknowledged any representation, or whether any conflict arose. Public non-disclosure does not prove that an internal control is absent.

No listed member is assessed. No Power of Attorney is declared valid, invalid, current or expired. No NRS action is alleged to have exceeded authority. Those questions require the private instrument, applicable law, verified actor records and recipient evidence that the captured public pages do not provide.

Sources