feat(records): add governed DSAR coverage

2026-08-21 02:31:10 +02:00
parent e9d2827581
commit 38f203a906
5 changed files with 1794 additions and 0 deletions
@@ -14,6 +14,15 @@ Alembic migration, tenant-scoped APIs, optimistic concurrency and idempotent
 filing, temporal reads, search registration, a full-height Records workspace,
 and provider-neutral filing from Files and Cases.

+The `privacy.dsar.records` capability exports bounded record and lifecycle
+metadata from an explicit record or authoritative source linkage. Canonical
+account, identity, and membership selectors return minimized staff
+accountability attribution; they do not turn a staff action into record-subject
+ownership. Immutable eAkte evidence is retained, while the current record fact
+is routed to manual lifecycle review. Source content, snapshots, opaque
+contexts, payloads, hashes, replay keys, and archive manifests/receipts are not
+exported by Records.
+
 ## Initial Ownership

 - file plans