# Anonymization audit

This replication package ships only de-identified inputs under `inputs/`. Raw survey exports and conversation transcripts are not distributed.

## What is included

- `inputs/analysis_dataset.csv` contains only:
  - `rid` (anonymized)
  - baseline and outcome numeric variables used for empirical models
  - MFQ covariates used for matching-related analyses
- `inputs/alignment_results_full.json` and `inputs/alignment_results_postNov_runs1_openai.json` contain only numeric annotation outputs keyed by anonymized `rid`. Free-text rationale fields are removed.
- `inputs/r/*.rds` contains de-identified R inputs required to reproduce the supporting-information tables produced by the R pipeline.

## What is removed

When generating `inputs/r/*.rds`, the build script drops:

- direct identifiers and survey-platform metadata, including:
  - `ipaddress*`, `recipient*`, `email*`, `firstname*`, `lastname*`, `zip*`
  - `startdate*`, `enddate*`, `recordeddate*`, `responseid*`, `externalreference*`
  - `distributionchannel*`, `userlanguage*`, and similar administrative fields
- location fields (`locationlatitude*`, `locationlongitude*`)
- transcript fields (`convo_history*`)
- free-text fields:
  - columns whose names contain `text`
  - object columns with very long strings, which are likely open-ended responses

## Notes

- This is a de-identification pass aimed at removing direct identifiers and obvious free-text fields that can contain identifiers.
- As with any de-identified dataset, re-identification risk depends on what external data an attacker might have access to.
