feat(idm): add governed DSAR coverage

This commit is contained in:
2026-08-21 01:32:50 +02:00
parent dc99a40384
commit 65ff14a613
4 changed files with 1410 additions and 0 deletions
+9
View File
@@ -91,6 +91,15 @@ planning.
The WebUI exposed by this repository is a normal module UI at `/idm`. It is the
editing surface for identity-to-organization-function assignment links.
The module also publishes `privacy.dsar.idm`. The provider finds tenant-scoped
function assignments, typed relationships, governed assignment changes, and
lifecycle events using corroborated identity/account selectors. Automated
exports minimize other candidates and actors and exclude opaque settings,
properties, provenance, external source references, policy/workflow internals,
idempotency material, evidence payloads, comments, and event details. Assignment
or relationship changes require the normal governed IDM lifecycle; immutable
change and event evidence is retained with an explicit reason.
Its interface archetypes, consequence classes, contextual-help contract, and
accessibility evidence are recorded in
[`docs/INTERFACE_PATTERN_MIGRATION.md`](docs/INTERFACE_PATTERN_MIGRATION.md).