{
  "id": "BRD-224",
  "slug": "brd-224",
  "title": "Public companies must clear Authentication+ before campaigns",
  "statement": "A PUBLIC_PROFIT brand must reach identity VERIFIED with Authentication+ ACTIVE before any campaign can be registered.",
  "rationale": "Authentication+ is a two-factor identity confirmation sent to the registered business contact, and it gates campaign creation for public companies specifically. Vendor guidance frequently describes TCR 2FA as universal; AWS is explicit that it applies only to PUBLIC_PROFIT, so applying it everywhere wastes time and applying it nowhere blocks public brands.",
  "layer": "BRAND",
  "layerSlug": "brand",
  "object": "brand.identity_status",
  "severity": "BLOCKING",
  "detectability": [
    "EXTERNAL_DATA"
  ],
  "failureClass": "TERMINAL_EXTERNAL",
  "authorities": [
    "TCR",
    "AWS"
  ],
  "applicability": {
    "entityTypes": [
      "PUBLIC_PROFIT"
    ]
  },
  "applicabilityText": "Applies when the brand is a public company.",
  "universal": false,
  "remediation": "Complete TCR Authentication+ (two-factor identity confirmation) for the brand before submitting campaigns.",
  "notes": "AWS is explicit that TCR 2FA applies only to PUBLIC_PROFIT. Vendor blogs routinely describe it as universal — it is not.",
  "phase": "approval",
  "automated": false,
  "attestation": {
    "question": "Does the brand show identity VERIFIED with an Authentication+ vet recorded as ACTIVE, before any campaign is submitted?",
    "howToCheck": [
      "Open the brand record at your provider and read two things: the identity status, and the list of vets attached to it.",
      "Confirm an Authentication+ (two-factor identity) vet is present and ACTIVE rather than merely ordered."
    ],
    "failureLooksLike": "The brand reads VERIFIED and looks finished, but carries no Authentication+ vet. Every campaign against it is refused, and the refusal names the campaign rather than the missing vet."
  },
  "url": "https://ekas.io/rules/10dlc/brand/brd-224/",
  "markdown": "https://ekas.io/rules/10dlc/brand/brd-224.md",
  "registry": "https://ekas.io/rules/10dlc/",
  "updated": "2026-07-25",
  "licence": "CC BY 4.0 — https://creativecommons.org/licenses/by/4.0/"
}