One Purpose per use of an image. Subjects decide allow / block per Purpose. Edits to description or scope would, in production, bump the version and trigger re-consent.