GovOPlaN/govoplan-portal
2
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

docs(portal): declare DSAR ownership boundary

Browse Source
This commit is contained in:
zemion
2026-08-21 02:21:53 +02:00
parent ed0357b146
commit 6f671f60f5
4 changed files with 80 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+7
View File
@@ -38,4 +38,11 @@ The public `/portal/status/:trackingId` surface presents the bounded
configured authenticated, short-lived email-link, and permanent-link modes,
while Portal owns only the accessible presentation and reload/request actions.
Portal deliberately does not publish a DSAR provider because it persists no
service-directory, launch, Postbox, application-status, applicant, or session
records. Services owns definitions, each launch target owns its effects,
Postbox owns mailbox data, and Forms Runtime owns status grants and submission
data. Core and the deployment operator remain responsible for request/security
logs. This reviewed boundary avoids duplicate or contradictory privacy exports.
See [docs/SERVICE_DIRECTORY_CONCEPT.md](docs/SERVICE_DIRECTORY_CONCEPT.md).