feat(search): add governed DSAR coverage

This commit is contained in:
2026-08-21 03:01:01 +02:00
parent cc13bcf45e
commit 016136f56c
4 changed files with 1119 additions and 0 deletions
+14
View File
@@ -55,3 +55,17 @@ Files, Campaign, Calendar, Mail, IDM, and Postbox provide native source
adapters. Mail indexes only its bounded read-only cache, and Postbox never
indexes ciphertext or key material. All six recheck current source-owned
authorization when results are returned.
## Data-subject requests
Search publishes `privacy.dsar.search` for derived index documents, queued
changes, and minimized ACL projections. Exact Search or source-module
references locate derived copies without exporting indexed text, URLs,
metadata, token values, hashes, cursors, queued payloads, or errors. Account,
identity, and membership matches describe access projections only and do not
establish ownership of source content.
Derived documents and queued changes can be purged idempotently. ACL-only
matches require review at the source authority. The authoritative module must
be corrected or erased before a rebuild; otherwise its provider may republish
the derived Search row.