{
  "id": "OPS-236",
  "slug": "ops-236",
  "title": "An IVR opt-in must log the prompt, the keypress, the time and the call",
  "statement": "Every consent record must carry the prompt version played, the digit or spoken answer captured, the timestamp and the call identifier.",
  "rationale": "An IVR consent leaves no human witness on either side, so the log is the entire record — and unlike a live agent, an IVR can be misconfigured to accept any keypress as agreement and will do it identically to everyone who calls. All four fields are needed together: the prompt says what was asked, the captured input says what was answered, and the call identifier is what ties the pair to a person.",
  "layer": "OPERATIONAL",
  "layerSlug": "operational",
  "object": "campaign.message_flow + privacy policy",
  "severity": "BLOCKING",
  "detectability": [
    "AI_FORM"
  ],
  "failureClass": "RETRY_FIELD",
  "authorities": [
    "FTC",
    "CTIA",
    "practice"
  ],
  "applicability": {
    "consentMethods": [
      "verbal_ivr"
    ]
  },
  "applicabilityText": "Applies when consent was collected by IVR.",
  "universal": false,
  "remediation": "Log all four values on every IVR consent: the prompt version played, the DTMF digit or recognised phrase captured, the timestamp, and the call identifier. Done when one log line lets you replay what was asked and what was pressed.",
  "example": "IVR opt-ins log: prompt_version=ivr-optin-v4, captured_input=DTMF 1, captured_at=2026-03-04T14:22:11Z, call_id=UCID-88213004.",
  "notes": "Registration-side twin of a runtime log. We judge the description of the log, never the log. The four elements are one record judged in one pass rather than four rules, because they fail together: a log missing any one of them cannot reconstruct a single consent.",
  "phase": "approval",
  "automated": true,
  "url": "https://ekas.io/rules/10dlc/operational/ops-236/",
  "markdown": "https://ekas.io/rules/10dlc/operational/ops-236.md",
  "registry": "https://ekas.io/rules/10dlc/",
  "updated": "2026-07-25",
  "licence": "CC BY 4.0 — https://creativecommons.org/licenses/by/4.0/"
}