feat(datasources): add governed DSAR coverage

2026-08-21 03:19:42 +02:00
parent 1bb03c0f91
commit f03497bdaf
4 changed files with 1451 additions and 10 deletions
@@ -41,3 +41,18 @@ without changing consumers. Larger durable artifact-backed publications remain
 a later storage-provider slice.

 See [docs/CONCEPT.md](docs/CONCEPT.md) for ownership and lifecycle details.
+
+## Data-subject requests
+
+Datasources publishes `privacy.dsar.datasources` for exact catalogue,
+governance-reference, materialization, payload, stage, and publication
+references and for minimized operator attribution. It never exports connector
+references, locators, credentials, arbitrary rows, schemas, validation
+samples, metadata, provenance bodies, checkpoints, replay material, or hashes.
+The module does not guess subject identity by scanning schema-dependent tabular
+payloads; the authoritative source module locates and corrects those facts.
+
+Unpromoted stages and unreferenced payloads can be deleted idempotently.
+Published or referenced state, immutable materializations, governance evidence,
+holds, and operator attribution require data-steward review. Dataflow and
+Reporting derivatives must be refreshed after the source correction.