feat: add governed Calendar DSAR coverage

2026-08-20 23:27:27 +02:00
parent 93fb8aeff8
commit a2a9e8e814
5 changed files with 1602 additions and 1 deletions
@@ -81,6 +81,15 @@ and appointment modules. It is not yet a CalDAV network server: external clients
 cannot use GovOPlaN itself as their CalDAV endpoint, and scheduling inbox/outbox
 delivery remains owned by the scheduling and mail integration work.

+Calendar also publishes `privacy.dsar.calendar`. Core's governed
+data-subject-request workflow can use it to find tenant-scoped organizer,
+attendee, preference, synchronization, outbox, and migration metadata. The
+provider isolates the matching party and omits raw ICS, connector locators,
+credentials, tokens, worker claims, and unrelated attendees. It classifies
+synchronized and correlated state as retained evidence, leaves shared event
+changes for manual review, and can safely delete only the subject's personal
+view preference after revalidating tenant and ownership.
+
 ## Development

 Install through the core environment: