GovOPlaN/govoplan-records
2
0
Fork 0
Code Issues 3 Pull Requests Actions Packages Projects Releases Wiki Activity

[Feature] Implement the eAkte lifecycle and archive interoperability overlay #1

New Issue
Open
opened 2026-08-05 16:21:21 +02:00 by zemion · 7 comments
zemion commented 2026-08-05 16:21:21 +02:00
Owner
Copy Link
Copy Source

Outcome

GovOPlaN can create and manage a legally and operationally explainable eAkte while linking to established DMS/archive systems where they remain authoritative.

Ownership

Records owns file-plan classification, record identity, filing associations, lifecycle state, retention schedules, legal holds, appraisal/disposition decisions, transfer evidence, completeness and closure. Files owns bytes; DMS owns collaborative document editing; Templates renders outputs; Workflow Engine coordinates work; Policy decides; Audit records evidence.

Scope

  • File plan, record/volume/case-part models, effective-dated filing associations, typed references, and provenance.
  • Open/frozen/closed/appraised/transfer-pending/transferred/disposed lifecycle with optimistic concurrency and no silent mutation.
  • Retention triggers, holds, appraisal, four-eyes disposition, transfer manifests, checksums, receipts, retries, reconciliation, and recovery-ledger evidence.
  • Native, external-authority, and hybrid overlay profiles with capability/health/freshness explanations.
  • XÖV/XDOMEA-style exchange profile, Bundesarchiv handoff profile, and preservation/signature evidence compatible with TR-ESOR principles where applicable.
  • Task-focused record UI, timeline, contents, access/purpose explanation, search, temporal view, export, and administration.

First proof

File the complete assisted service-to-decision journey: intake evidence, representations, versions, decision, delivery evidence, correction, record closure, retention start, legal-hold drill, and a simulated external archive transfer/reconciliation.

Acceptance criteria

  • The record remains reconstructable after restore and worker/node loss.
  • Current authorization governs historical reads; every filing and lifecycle action records institutional context and purpose.
  • Holds prevent disposition, unknown transfer outcomes do not trigger deletion, and corrections supersede rather than rewrite evidence.
  • Native and linked external records present one coherent task surface without hiding source authority.
  • User, administrator, operator, security, integration, and recovery documentation ship with the module.

Architecture: docs/EAKTE_ARCHITECTURE.md.

## Outcome GovOPlaN can create and manage a legally and operationally explainable eAkte while linking to established DMS/archive systems where they remain authoritative. ## Ownership Records owns file-plan classification, record identity, filing associations, lifecycle state, retention schedules, legal holds, appraisal/disposition decisions, transfer evidence, completeness and closure. Files owns bytes; DMS owns collaborative document editing; Templates renders outputs; Workflow Engine coordinates work; Policy decides; Audit records evidence. ## Scope - File plan, record/volume/case-part models, effective-dated filing associations, typed references, and provenance. - Open/frozen/closed/appraised/transfer-pending/transferred/disposed lifecycle with optimistic concurrency and no silent mutation. - Retention triggers, holds, appraisal, four-eyes disposition, transfer manifests, checksums, receipts, retries, reconciliation, and recovery-ledger evidence. - Native, external-authority, and hybrid overlay profiles with capability/health/freshness explanations. - XÖV/XDOMEA-style exchange profile, Bundesarchiv handoff profile, and preservation/signature evidence compatible with TR-ESOR principles where applicable. - Task-focused record UI, timeline, contents, access/purpose explanation, search, temporal view, export, and administration. ## First proof File the complete assisted service-to-decision journey: intake evidence, representations, versions, decision, delivery evidence, correction, record closure, retention start, legal-hold drill, and a simulated external archive transfer/reconciliation. ## Acceptance criteria - The record remains reconstructable after restore and worker/node loss. - Current authorization governs historical reads; every filing and lifecycle action records institutional context and purpose. - Holds prevent disposition, unknown transfer outcomes do not trigger deletion, and corrections supersede rather than rewrite evidence. - Native and linked external records present one coherent task surface without hiding source authority. - User, administrator, operator, security, integration, and recovery documentation ship with the module. Architecture: `docs/EAKTE_ARCHITECTURE.md`.
zemion commented 2026-08-05 16:50:16 +02:00
Author
Owner
Copy Link
Copy Source

Codex State: progress

Summary

  • Defined the eAkte as the records lifecycle and evidentiary overlay across existing GovOPlaN objects, rather than a duplicate document store.
  • Recorded ownership boundaries, lifecycle, filing semantics, native/external/hybrid modes, archival profiles, recovery, and the first reference-journey acceptance target.

Changed Files

  • docs/EAKTE_ARCHITECTURE.md
  • docs/RECORDS_DOMAIN_BOUNDARY.md
  • src/govoplan_records/manifest.py

Verification

  • python -m unittest tests.test_module_manifest: passed

Next / Blocked

  • Implement file plans, filing/reference APIs, retention/hold/disposition state machines, and the eAkte workspace against the inclusive service-to-decision reference journey.

Suggested status label: status/in-progress

## Codex State: progress ### Summary - Defined the eAkte as the records lifecycle and evidentiary overlay across existing GovOPlaN objects, rather than a duplicate document store. - Recorded ownership boundaries, lifecycle, filing semantics, native/external/hybrid modes, archival profiles, recovery, and the first reference-journey acceptance target. ### Changed Files - `docs/EAKTE_ARCHITECTURE.md` - `docs/RECORDS_DOMAIN_BOUNDARY.md` - `src/govoplan_records/manifest.py` ### Verification - `python -m unittest tests.test_module_manifest: passed` ### Next / Blocked - Implement file plans, filing/reference APIs, retention/hold/disposition state machines, and the eAkte workspace against the inclusive service-to-decision reference journey. Suggested status label: `status/in-progress`
zemion commented 2026-08-06 00:28:35 +02:00
Author
Owner
Copy Link
Copy Source

Delivery breakdown

  • #2 - [Feature] Persist the native Records kernel and bitemporal file plan
  • #3 - [Feature] Build the task-focused eAkte Records workspace
  • #4 - [Feature] Add the provider-neutral Records filing capability and initial Files/Cases sources
  • #5 - [Feature] Implement record closure, retention, holds, appraisal and reviewed disposition
  • #6 - [Security] Adopt recovery-ledger and evidence guarantees for Records effects
  • #7 - [Feature] Add native transfer packages and one tested eAkte/archive provider
  • #8 - [User Story] File and recover the assisted service-to-decision journey as an eAkte
## Delivery breakdown - [ ] #2 - [Feature] Persist the native Records kernel and bitemporal file plan - [ ] #3 - [Feature] Build the task-focused eAkte Records workspace - [ ] #4 - [Feature] Add the provider-neutral Records filing capability and initial Files/Cases sources - [ ] #5 - [Feature] Implement record closure, retention, holds, appraisal and reviewed disposition - [ ] #6 - [Security] Adopt recovery-ledger and evidence guarantees for Records effects - [ ] #7 - [Feature] Add native transfer packages and one tested eAkte/archive provider - [ ] #8 - [User Story] File and recover the assisted service-to-decision journey as an eAkte
zemion commented 2026-08-06 01:54:48 +02:00
Author
Owner
Copy Link
Copy Source

Native eAkte vertical delivered

Issues #2, #3, and #4 are implemented and closed by:

  • GovOPlaN/govoplan-core@5d12877
  • GovOPlaN/govoplan-records@f316523
  • GovOPlaN/govoplan-files@60c3d14
  • GovOPlaN/govoplan-cases@2f030e5
  • GovOPlaN/govoplan@d6fdd7d

The first usable vertical now covers native records, temporal/OCC/idempotent persistence, a German-first eAkte workspace, permission-rechecked search, and exact Files/Cases filing through a provider-neutral contract.

The epic remains open for #5 lifecycle/retention/holds/disposition, #6 recovery evidence, #7 archive interoperability, and #8 the end-to-end reference story. Catalog administration and explicit volume-management UI are also recorded as remaining epic depth in the strict platform inventory.

## Native eAkte vertical delivered Issues #2, #3, and #4 are implemented and closed by: - `GovOPlaN/govoplan-core@5d12877` - `GovOPlaN/govoplan-records@f316523` - `GovOPlaN/govoplan-files@60c3d14` - `GovOPlaN/govoplan-cases@2f030e5` - `GovOPlaN/govoplan@d6fdd7d` The first usable vertical now covers native records, temporal/OCC/idempotent persistence, a German-first eAkte workspace, permission-rechecked search, and exact Files/Cases filing through a provider-neutral contract. The epic remains open for #5 lifecycle/retention/holds/disposition, #6 recovery evidence, #7 archive interoperability, and #8 the end-to-end reference story. Catalog administration and explicit volume-management UI are also recorded as remaining epic depth in the strict platform inventory. <!-- codex-records-epic-progress-f316523 -->
zemion commented 2026-08-06 05:42:38 +02:00
Author
Owner
Copy Link
Copy Source

Codex State: progress

Summary

  • The native eAkte foundation now includes governed file plans/classes/volumes, immutable record chronology, exact-source filing, lifecycle and retention, legal holds, four-eyes disposition, recovery evidence and archive-transfer packaging.
  • Records #5 and #6 are complete. The neutral archive boundary and a first executable service-to-decision fixture are implemented.

Changed Files

  • docs/EAKTE_ARCHITECTURE.md
  • docs/RECORDS_DOMAIN_BOUNDARY.md

Next / Blocked

  • Records #7 remains open for a real archive/DMS conformance target; Records #8 remains open for the complete resumable cross-module assisted journey.
  • Continue the epic through those two bounded remaining tracks rather than adding record-owned copies of Cases, Decisions, Files or Workflow behavior.

Suggested status label: status/in-progress

## Codex State: progress ### Summary - The native eAkte foundation now includes governed file plans/classes/volumes, immutable record chronology, exact-source filing, lifecycle and retention, legal holds, four-eyes disposition, recovery evidence and archive-transfer packaging. - Records #5 and #6 are complete. The neutral archive boundary and a first executable service-to-decision fixture are implemented. ### Changed Files - `docs/EAKTE_ARCHITECTURE.md` - `docs/RECORDS_DOMAIN_BOUNDARY.md` ### Next / Blocked - Records #7 remains open for a real archive/DMS conformance target; Records #8 remains open for the complete resumable cross-module assisted journey. - Continue the epic through those two bounded remaining tracks rather than adding record-owned copies of Cases, Decisions, Files or Workflow behavior. Suggested status label: `status/in-progress`
zemion commented 2026-08-06 12:47:33 +02:00
Author
Owner
Copy Link
Copy Source

Codex State: progress

Forms Runtime and Decisions now contribute exact, currently-authorized Records sources. The Records workspace can select source-ready Forms/Decision filing presets, file exact versions, and explain when an optional source module is unavailable. Cases can create a formal Decision through the shared capability and pass its exact reference into eAkte filing.

Commits: govoplan-core@b5f5be1, govoplan-forms-runtime@3c292b8, govoplan-cases@23f5091, govoplan-decisions@3845e06, govoplan-records@011c388.

The epic remains open for a target-tested archive/DMS provider and completion of the resumable end-to-end reference journey.

## Codex State: progress Forms Runtime and Decisions now contribute exact, currently-authorized Records sources. The Records workspace can select source-ready Forms/Decision filing presets, file exact versions, and explain when an optional source module is unavailable. Cases can create a formal Decision through the shared capability and pass its exact reference into eAkte filing. Commits: `govoplan-core@b5f5be1`, `govoplan-forms-runtime@3c292b8`, `govoplan-cases@23f5091`, `govoplan-decisions@3845e06`, `govoplan-records@011c388`. The epic remains open for a target-tested archive/DMS provider and completion of the resumable end-to-end reference journey.
zemion commented 2026-08-22 19:03:05 +02:00
Author
Owner
Copy Link
Copy Source

Reference-package milestone completed: #8 is implemented and released as Records v0.1.20, with the full assisted/digital service-to-decision eAkte journey, governance evidence, lifecycle/recovery proof and operator UI.

The feature remains open for the independently tracked external archive target in #7 (and any remaining restricted-object-grant work); #8 is no longer part of the open implementation surface.

Reference-package milestone completed: #8 is implemented and released as Records v0.1.20, with the full assisted/digital service-to-decision eAkte journey, governance evidence, lifecycle/recovery proof and operator UI. The feature remains open for the independently tracked external archive target in #7 (and any remaining restricted-object-grant work); #8 is no longer part of the open implementation surface.
zemion commented 2026-08-24 19:29:06 +02:00
Author
Owner
Copy Link
Copy Source

The purpose-bound restricted-record slice is complete and published as v0.1.23 (a2dd280). It adds revisioned/effective-dated access grants, exact-purpose enforcement across list/detail/search/write/lifecycle paths, current-grant checks for historical access, the last-manager invariant, minimized DSAR disclosure, bilingual documentation, and a shared-component grant administration dialog. The full workspace gate passed, including both Records module permutations and the full-product build.

This advances the e-file epic substantially; the real d.velop d3 archive integration tracked in #7 remains an external-system slice and this epic should stay open.

The purpose-bound restricted-record slice is complete and published as v0.1.23 (a2dd280). It adds revisioned/effective-dated access grants, exact-purpose enforcement across list/detail/search/write/lifecycle paths, current-grant checks for historical access, the last-manager invariant, minimized DSAR disclosure, bilingual documentation, and a shared-component grant administration dialog. The full workspace gate passed, including both Records module permutations and the full-product build. This advances the e-file epic substantially; the real d.velop d3 archive integration tracked in #7 remains an external-system slice and this epic should stay open.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
area/api
HTTP API contracts, routers, schemas, or API smoke behavior.
 area/auth
Authentication, sessions, access bootstrap, or login behavior.
 area/db
Database sessions, models, transactions, or persistence primitives.
 area/devex
Local developer workflow, scripts, tests, tooling, or release helpers.
 area/docs
Durable documentation and project guidance.
 area/governance
Governance policy, audit, privacy, retention, or compliance behavior.
 area/marketing
Public website, product messaging, publication copy, or legal page content.
 area/migrations
Alembic migrations, schema bootstrap, or persistence evolution.
 area/module-system
Module discovery, manifests, capabilities, routing, or optional integrations.
 area/rbac
Permissions, roles, delegation, or authorization policy.
 area/release
Versioning, release locks, tags, packaging, or dependency pins.
 area/security
Security posture, static analysis, supply-chain hardening, or vulnerability remediation.
 area/tenancy
Tenant boundaries, provisioning, or tenant-scoped data behavior.
 area/webui
Shared WebUI shell, frontend components, routing, or frontend tests.
 audit/complexity
Complexity finding from Radon, Xenon, or equivalent maintainability scans.
 audit/duplication
Duplicated-code finding from jscpd or equivalent similarity scans.
 audit/false-positive
Audit finding reviewed as a narrow false positive or acceptable risk.
 audit/needs-design
Audit finding that needs an architectural or product decision before implementation.
 audit/quick-fix
Audit finding that appears narrow and directly fixable.
 audit/structural
Audit finding that needs design, refactoring, or behavior review.
 codex/needs-human
Needs an explicit human decision before Codex should implement.
 codex/ready
Suitable for Codex to pick up with the existing issue context.
 module/access
GovOPlaN access, identity, authentication, RBAC, and administration behavior.
 module/addresses
GovOPlaN Addresses module behavior or integration.
 module/admin
GovOPlaN Admin module behavior or integration.
 module/appointments
GovOPlaN Appointments module behavior or integration.
 module/approvals
GovOPlaN Approvals module behavior or integration.
 module/audit
GovOPlaN Audit module behavior or integration.
 module/calendar
GovOPlaN Calendar module behavior or integration.
 module/campaign
GovOPlaN campaign module behavior or integration.
 module/cases
GovOPlaN Cases module behavior or integration.
 module/committee
GovOPlaN Committee module behavior or integration.
 module/connectors
GovOPlaN Connectors module behavior or integration.
 module/core
GovOPlaN core runner, shared primitives, shell, or extension points.
 module/dashboard
GovOPlaN Dashboard module behavior or integration.
 module/dataflow
GovOPlaN Dataflow module behavior or integration.
 module/datasources
GovOPlaN governed datasource contracts, catalogs, and integrations.
 module/decisions
GovOPlaN formal Decisions module behavior or integration.
 module/dist-lists
GovOPlaN Distribution Lists module behavior or integration.
 module/dms
GovOPlaN Dms module behavior or integration.
 module/docs
GovOPlaN Docs module behavior or integration.
 module/encryption
GovOPlaN Encryption key custody, cryptographic policy, and E2EE integration.
 module/erp
GovOPlaN Erp module behavior or integration.
 module/evaluation
GovOPlaN Evaluation module behavior or integration.
 module/files
GovOPlaN files module behavior or integration.
 module/fit-connect
GovOPlaN Fit Connect module behavior or integration.
 module/forms
GovOPlaN Forms module behavior or integration.
 module/forms-runtime
GovOPlaN Forms Runtime module behavior or integration.
 module/helpdesk
GovOPlaN Helpdesk module behavior or integration.
 module/identity
GovOPlaN Identity module behavior or integration.
 module/identity-trust
GovOPlaN Identity Trust module behavior or integration.
 module/idm
GovOPlaN Idm module behavior or integration.
 module/ledger
GovOPlaN Ledger module behavior or integration.
 module/mail
GovOPlaN mail module behavior or integration.
 module/mandates
GovOPlaN Mandates, jurisdiction, responsibility, and authority behavior or integration.
 module/notifications
GovOPlaN Notifications module behavior or integration.
 module/ops
GovOPlaN Ops module behavior or integration.
 module/organizations
GovOPlaN Organizations module behavior or integration.
 module/parties
GovOPlaN procedure Parties, representation, and delivery-authority behavior or integration.
 module/payments
GovOPlaN Payments module behavior or integration.
 module/permits
GovOPlaN Permits module behavior or integration.
 module/policy
GovOPlaN Policy module behavior or integration.
 module/poll
GovOPlaN Poll module behavior or integration.
 module/portal
GovOPlaN Portal module behavior or integration.
 module/postbox
GovOPlaN Postbox module behavior or integration.
 module/projects
GovOPlaN Projects module behavior or integration.
 module/quick-access
GovOPlaN configurable task-local Quick Access behavior and integrations.
 module/records
GovOPlaN Records and eAkte lifecycle behavior or integration.
 module/reporting
GovOPlaN Reporting module behavior or integration.
 module/risk-compliance
GovOPlaN Risk Compliance module behavior or integration.
 module/scheduling
GovOPlaN Scheduling module behavior or integration.
 module/search
GovOPlaN Search module behavior or integration.
 module/services
GovOPlaN versioned institutional Services behavior or integration.
 module/tasks
GovOPlaN Tasks module behavior or integration.
 module/templates
GovOPlaN Templates module behavior or integration.
 module/tenancy
GovOPlaN Tenancy module behavior or integration.
 module/tickets
GovOPlaN Tickets module behavior or integration.
 module/views
GovOPlaN governed task views, interface projections, and workflow view integration.
 module/voting
GovOPlaN Voting module behavior or integration.
 module/wiki
GovOPlaN Wiki module behavior or integration.
 module/workflow
GovOPlaN Workflow module behavior or integration.
 module/workflow-engine
GovOPlaN Workflow Engine runtime, persistence, or integration.
 module/xoev
GovOPlaN Xoev module behavior or integration.
 module/xrechnung
GovOPlaN Xrechnung module behavior or integration.
 module/xta-osci
GovOPlaN Xta Osci module behavior or integration.
priority
p0
Immediate stop-the-line priority.
priority
p1
High priority for the next focused work window.
priority
p2
Normal planned priority.
priority
p3
Low priority or opportunistic cleanup.
source/backlog-import
Imported from markdown backlog, roadmap, plan, or TODO files.
 source/security-audit
Created from a structured security or code-quality audit report.
 source/todo-scan
Imported from inline TODO/FIXME/HACK markers by the Gitea TODO importer.
status
blocked
Cannot progress without a decision, dependency, credential, or external change.
status
in-progress
Currently being worked.
status
needs-info
Needs clarifying input before implementation can proceed safely.
status
ready
Ready for implementation.
status
triage
Needs review, ownership, priority, or acceptance criteria.
type
bug
A reproducible defect, regression, or incorrect behavior.
type
debt
Cleanup, refactoring, risk reduction, or deferred engineering work.
type
docs
Documentation, process, or developer workflow work.
type
feature
New user-visible behavior or platform capability.
type
task
Implementation, maintenance, migration, or operational work.
type
user-story
End-to-end user journey or real-world process story used to steer product slices.
No labels area/api area/db area/governance area/security area/webui codex/ready module/audit module/files module/policy module/records
priority
p1
status
ready
type
feature
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
govoplan-package-publisher zemion (Albrecht Degering)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: GovOPlaN/govoplan-records#1