feat: contribute tenant erasure for access data

2026-08-24 15:57:20 +02:00
parent e55434f406
commit 0f8a05f8b9
9 changed files with 434 additions and 6 deletions
@@ -66,6 +66,9 @@ This module will own:
  capabilities, including the bounded `access.governanceProjection.v1` bulk
  reconciliation contract used by Admin for idempotent per-assignment outcomes
 - access-owned migrations
+- a provider-neutral tenant-erasure contribution that removes tenant-scoped
+  credentials and authorization projections while preserving shared global
+  accounts and identities

 The governance-template routes under `/admin/system/governance-templates` are
 contributed by `govoplan-admin`; access must not register those routes.