feat(services): add governed DSAR attribution

2026-08-21 02:34:31 +02:00
parent 468c7bb910
commit a7998a578c
5 changed files with 670 additions and 0 deletions
@@ -34,3 +34,19 @@ current service in the tenant.
 Database restore is the recovery unit. Consumers retain the exact service
 reference and revision used for a case or publication, so restore and audit do
 not depend on whatever definition happens to be current later.
+
+## Data-subject request ownership
+
+Services publishes `privacy.dsar.services` for the personal attribution on
+definition revisions. It accepts exact-tenant account, identity, and membership
+selectors; optional service or revision references only narrow and corroborate
+the actor match. Results contain bounded definition identity, revision,
+publication, and temporal facts. Definition payloads, search text, and
+unrelated author activity are excluded. Append-only attribution remains
+institutional evidence, so the provider publishes retain-only,
+non-executable actions.
+
+Services stores no resident interaction or launch execution. Portal resolves
+and presents definitions without persisting an interaction. Cases, Forms
+Runtime, or Workflow Engine owns the concrete launch effect selected by the
+binding and supplies its corresponding data-subject request coverage.