GovOPlaN/govoplan-services
2
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

feat(services): add governed DSAR attribution

Browse Source
This commit is contained in:
zemion
2026-08-21 02:34:31 +02:00
parent 468c7bb910
commit a7998a578c
5 changed files with 670 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/SERVICES_DOMAIN.md
+16
View File
@@ -34,3 +34,19 @@ current service in the tenant.
Database restore is the recovery unit. Consumers retain the exact service
reference and revision used for a case or publication, so restore and audit do
not depend on whatever definition happens to be current later.
## Data-subject request ownership
Services publishes `privacy.dsar.services` for the personal attribution on
definition revisions. It accepts exact-tenant account, identity, and membership
selectors; optional service or revision references only narrow and corroborate
the actor match. Results contain bounded definition identity, revision,
publication, and temporal facts. Definition payloads, search text, and
unrelated author activity are excluded. Append-only attribution remains
institutional evidence, so the provider publishes retain-only,
non-executable actions.
Services stores no resident interaction or launch execution. Portal resolves
and presents definitions without persisting an interaction. Cases, Forms
Runtime, or Workflow Engine owns the concrete launch effect selected by the
binding and supplies its corresponding data-subject request coverage.