voice

Each Kai's《家人声音档案》— a provider-agnostic voice profile (reference-audio path + Mandarin/English prompts), 1:1 with an identity, plus per-provider derived voice_ids (MiniMax today, CosyVoice 2 on Jetson tomorrow — same profile drives both). This surface holds only family-secret voices. Intimate voices (Therapist-Kai, Kai-Coeur) live in kai-private/voice-bank, never here — the DB physically refuses them. Reference audio is a path only; bytes never enter the database.

Clone governance TASK_017.F

Consent gates the artifact-producing voice actions — clone and same-identity cross-provider portability (the offline-re-derivable carrier). Generation (a new synthetic voice from a prompt) produces no artifact and needs no consent. Only Yu grants; a Kai can never self-consent. Mimiya, minors, Yu's own voice and non-family are permanently refused.

Audit trail — every consent change + egress attempt · Yu + CRSO only