Add governed DSAR coverage for approval participation #4

New Issue

2026-08-21T11:55:21+02:00

zemion commented

2026-08-21 11:55:21 +02:00

Goal

Cover subject participation and actor attribution in immutable approval chains through the Core data-subject request workflow tracked by GovOPlaN/govoplan#47.

Scope

provide and document privacy.dsar.approvals
correlate exact actor identifiers with optional approval-request narrowing
export bounded personal decision participation and minimized request, lifecycle, and template attribution
exclude arbitrary approval payloads, authority provenance, signatures, hashes, and replay state
retain immutable attribution and require manual review for authored decision reasons
add focused provider and Core workflow coverage

Acceptance criteria

request identifiers alone do not disclose approval content
unrelated actors, requests, and tenants remain excluded
approval-chain integrity cannot be changed automatically by an erasure request
focused tests, Ruff, and manifest checks pass

## Goal Cover subject participation and actor attribution in immutable approval chains through the Core data-subject request workflow tracked by GovOPlaN/govoplan#47. ## Scope - provide and document `privacy.dsar.approvals` - correlate exact actor identifiers with optional approval-request narrowing - export bounded personal decision participation and minimized request, lifecycle, and template attribution - exclude arbitrary approval payloads, authority provenance, signatures, hashes, and replay state - retain immutable attribution and require manual review for authored decision reasons - add focused provider and Core workflow coverage ## Acceptance criteria - request identifiers alone do not disclose approval content - unrelated actors, requests, and tenants remain excluded - approval-chain integrity cannot be changed automatically by an erasure request - focused tests, Ruff, and manifest checks pass

zemion commented

2026-08-21 12:35:48 +02:00

Implemented and pushed in 5d3eeb0.

Added privacy.dsar.approvals for actor and request-scoped participation, minimized attribution and authored reasons, protected-payload exclusions, tests, and user/admin documentation.
Verified with the module test and lint suite.
Verified across the workspace with tools/checks/check-focused.sh: manifest and boundary checks, backend suites, 59 WebUI module permutations, seven Playwright conformance tests, and module-specific frontend checks all passed.

Implemented and pushed in `5d3eeb0`. - Added privacy.dsar.approvals for actor and request-scoped participation, minimized attribution and authored reasons, protected-payload exclusions, tests, and user/admin documentation. - Verified with the module test and lint suite. - Verified across the workspace with `tools/checks/check-focused.sh`: manifest and boundary checks, backend suites, 59 WebUI module permutations, seven Playwright conformance tests, and module-specific frontend checks all passed.

zemion closed this issue

2026-08-21 12:35:48 +02:00

zemion referenced this issue from GovOPlaN/govoplan

2026-08-21 12:36:23 +02:00

[Privacy] Complete DSAR provider coverage across data-owning modules #47

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: GovOPlaN/govoplan-approvals#4