GovOPlaN/govoplan
2
0
Fork 0
Code Issues 18 Pull Requests Actions Packages Projects Releases 3 Wiki Activity

[Privacy] Complete DSAR provider coverage across data-owning modules #47

New Issue
Closed
opened 2026-08-07 14:51:08 +02:00 by zemion · 13 comments
zemion commented 2026-08-07 14:51:08 +02:00
Owner
Copy Link
Copy Source

Context

Core #59 now owns a durable, provider-neutral data-subject request workflow with selector corroboration, coverage reporting, immutable authorization evidence, review/export/erasure states, optimistic concurrency, typed erasure confirmation, audit events, and an Access reference provider. Active modules without a provider are reported explicitly rather than silently omitted.

This umbrella tracks adoption by every remaining data-owning module.

Provider Contract

Each provider must:

  • search only within the effective tenant and authorized scope;
  • return bounded references and export data without secrets or credential material;
  • distinguish deletable, anonymizable, immutable, legally retained, and manually reviewed data;
  • state retention/legal reasons for every non-erased record;
  • produce an idempotent erasure plan and idempotent execution result;
  • preserve audit, records, delivery, signature, and other immutable evidence obligations;
  • test disabled-module, partial-failure, retry, and horizontally concurrent execution.

Rollout

  • Files and file-version/evidence metadata
  • Campaign versions, recipients, deliveries, reports, and artifacts
  • Calendar and scheduling data
  • Mail and Postbox data
  • IDM, Organizations, Addresses, and Parties data
  • Cases, Records, Forms Runtime, Portal, and service interactions
  • Datasources, Dataflow, Workflow Engine, Reporting, and Search indexes
  • Dashboard, Quick Access, Views, Notifications, Audit, Tasks, and Payments
  • Identity, Identity Trust, Approvals, Decisions, Voting, Poll, and Committee
  • Risk Compliance, Connectors, Encryption, Distribution Lists, Projects, Templates, Admin, Forms, Mandates, and Policy
  • Remaining data-owning modules or an explicit reviewed rationale for no provider
  • Cross-module integration matrix with zero unexplained active-module coverage gaps

Related: GovOPlaN/govoplan-core#59.

## Context Core #59 now owns a durable, provider-neutral data-subject request workflow with selector corroboration, coverage reporting, immutable authorization evidence, review/export/erasure states, optimistic concurrency, typed erasure confirmation, audit events, and an Access reference provider. Active modules without a provider are reported explicitly rather than silently omitted. This umbrella tracks adoption by every remaining data-owning module. ## Provider Contract Each provider must: - search only within the effective tenant and authorized scope; - return bounded references and export data without secrets or credential material; - distinguish deletable, anonymizable, immutable, legally retained, and manually reviewed data; - state retention/legal reasons for every non-erased record; - produce an idempotent erasure plan and idempotent execution result; - preserve audit, records, delivery, signature, and other immutable evidence obligations; - test disabled-module, partial-failure, retry, and horizontally concurrent execution. ## Rollout - [x] Files and file-version/evidence metadata - [x] Campaign versions, recipients, deliveries, reports, and artifacts - [x] Calendar and scheduling data - [x] Mail and Postbox data - [x] IDM, Organizations, Addresses, and Parties data - [x] Cases, Records, Forms Runtime, Portal, and service interactions - [x] Datasources, Dataflow, Workflow Engine, Reporting, and Search indexes - [x] Dashboard, Quick Access, Views, Notifications, Audit, Tasks, and Payments - [x] Identity, Identity Trust, Approvals, Decisions, Voting, Poll, and Committee - [x] Risk Compliance, Connectors, Encryption, Distribution Lists, Projects, Templates, Admin, Forms, Mandates, and Policy - [x] Remaining data-owning modules or an explicit reviewed rationale for no provider - [x] Cross-module integration matrix with zero unexplained active-module coverage gaps Related: GovOPlaN/govoplan-core#59.
zemion commented 2026-08-20 22:41:43 +02:00
Author
Owner
Copy Link
Copy Source

Files DSAR coverage is complete via GovOPlaN/govoplan-files#44 and govoplan-files@ce4eaef. The provider covers Files/file-version/evidence metadata without exporting raw bytes or credential material, classifies retained and manual-review records, and automates only revalidated idempotent share revocation and mutable subject-reference detachment. The umbrella rollout checkbox has been updated. Full workspace focused verification passed.

Files DSAR coverage is complete via GovOPlaN/govoplan-files#44 and `govoplan-files@ce4eaef`. The provider covers Files/file-version/evidence metadata without exporting raw bytes or credential material, classifies retained and manual-review records, and automates only revalidated idempotent share revocation and mutable subject-reference detachment. The umbrella rollout checkbox has been updated. Full workspace focused verification passed.
zemion commented 2026-08-20 23:16:43 +02:00
Author
Owner
Copy Link
Copy Source

Campaign provider coverage is complete via govoplan-campaign#94 and pushed as govoplan-campaign@73cfad2. The provider covers isolated recipient/version/job/delivery/report/artifact metadata, preserves immutable evidence, executes only revalidated reversible personal preferences and access changes, and passed the complete workspace focused gate.

Campaign provider coverage is complete via govoplan-campaign#94 and pushed as govoplan-campaign@73cfad2. The provider covers isolated recipient/version/job/delivery/report/artifact metadata, preserves immutable evidence, executes only revalidated reversible personal preferences and access changes, and passed the complete workspace focused gate.
zemion commented 2026-08-20 23:53:47 +02:00
Author
Owner
Copy Link
Copy Source

Calendar and Scheduling coverage is complete and pushed.

  • Calendar: GovOPlaN/govoplan-calendar@a2a9e8e; module issue #24 closed; full suite 151 passed, 5 subtests passed.
  • Scheduling: GovOPlaN/govoplan-scheduling@0fd2972; module issue #9 closed; full suite 94 passed.
  • Workspace manifest registry: 68/68.
  • Complete tools/checks/check-focused.sh: passed, including backend/migrations, dependency and shared UI contracts, 59 WebUI permutations and bundle budgets, 7 Playwright conformance tests, and trailing module UI checks.

The umbrella rollout item Calendar and scheduling data is now checked.

Calendar and Scheduling coverage is complete and pushed. - Calendar: `GovOPlaN/govoplan-calendar@a2a9e8e`; module issue #24 closed; full suite `151 passed, 5 subtests passed`. - Scheduling: `GovOPlaN/govoplan-scheduling@0fd2972`; module issue #9 closed; full suite `94 passed`. - Workspace manifest registry: 68/68. - Complete `tools/checks/check-focused.sh`: passed, including backend/migrations, dependency and shared UI contracts, 59 WebUI permutations and bundle budgets, 7 Playwright conformance tests, and trailing module UI checks. The umbrella rollout item `Calendar and scheduling data` is now checked.
zemion commented 2026-08-20 23:58:54 +02:00
Author
Owner
Copy Link
Copy Source

Mail DSAR coverage is complete: GovOPlaN/govoplan-mail@34bd5be; module issue #22 is closed. Full Mail suite: 141 passed, 22 subtests passed; manifest registry: 68/68. The shared Mail and Postbox data checkbox remains open until Postbox coverage is complete.

Mail DSAR coverage is complete: `GovOPlaN/govoplan-mail@34bd5be`; module issue #22 is closed. Full Mail suite: `141 passed, 22 subtests passed`; manifest registry: 68/68. The shared `Mail and Postbox data` checkbox remains open until Postbox coverage is complete.
zemion commented 2026-08-21 00:52:09 +02:00
Author
Owner
Copy Link
Copy Source

Mail and Postbox rollout is complete.

  • Mail DSAR provider: GovOPlaN/govoplan-mail@34bd5be; package/manifest version alignment: 2fe56fc.
  • Postbox governed DSAR provider: GovOPlaN/govoplan-postbox@e5da713; child issue #28 closed.
  • Full focused workspace gate passed after both modules were aligned.

The umbrella rollout checkbox has been updated. The next dependency-safe cluster is IDM, Organizations, Addresses, and Parties.

Mail and Postbox rollout is complete. - Mail DSAR provider: `GovOPlaN/govoplan-mail@34bd5be`; package/manifest version alignment: `2fe56fc`. - Postbox governed DSAR provider: `GovOPlaN/govoplan-postbox@e5da713`; child issue #28 closed. - Full focused workspace gate passed after both modules were aligned. The umbrella rollout checkbox has been updated. The next dependency-safe cluster is IDM, Organizations, Addresses, and Parties.
zemion commented 2026-08-21 01:21:47 +02:00
Author
Owner
Copy Link
Copy Source

Addresses DSAR coverage is complete: GovOPlaN/govoplan-addresses@8740fb3; child issue GovOPlaN/govoplan-addresses#24 is closed. The full focused workspace gate passed. The IDM / Organizations / Addresses / Parties rollout item remains open while the other three providers are implemented.

Addresses DSAR coverage is complete: `GovOPlaN/govoplan-addresses@8740fb3`; child issue GovOPlaN/govoplan-addresses#24 is closed. The full focused workspace gate passed. The IDM / Organizations / Addresses / Parties rollout item remains open while the other three providers are implemented.
zemion commented 2026-08-21 02:02:09 +02:00
Author
Owner
Copy Link
Copy Source

Completed the IDM / Organizations / Addresses / Parties rollout cluster: govoplan-organizations@aa4ed0b, govoplan-idm@65ff14a, govoplan-addresses@8740fb3, and govoplan-parties@9a9c4ca. Each provider is exact-tenant, bounded, minimized, fail-closed on selector conflicts, and publishes governed non-automatic dispositions. The complete focused workspace gate passes, including all 59 WebUI permutations and 7 browser conformance checks. Child issues Organizations #8, IDM #13, Addresses #24, and Parties #1 are closed.

Completed the IDM / Organizations / Addresses / Parties rollout cluster: `govoplan-organizations@aa4ed0b`, `govoplan-idm@65ff14a`, `govoplan-addresses@8740fb3`, and `govoplan-parties@9a9c4ca`. Each provider is exact-tenant, bounded, minimized, fail-closed on selector conflicts, and publishes governed non-automatic dispositions. The complete focused workspace gate passes, including all 59 WebUI permutations and 7 browser conformance checks. Child issues Organizations #8, IDM #13, Addresses #24, and Parties #1 are closed.
zemion commented 2026-08-21 02:53:29 +02:00
Author
Owner
Copy Link
Copy Source

Completed the Cases / Records / Forms Runtime / Portal / service-interactions rollout cluster.

  • Cases: eab2f4b (privacy.dsar.cases)
  • Forms Runtime: 2ea7afa (privacy.dsar.forms_runtime)
  • Portal: 6f671f6 (reviewed no-persistence/no-provider boundary)
  • Records: 38f203a (privacy.dsar.records)
  • Services: a7998a5 (privacy.dsar.services; catalogue attribution, with runtime effects owned by Cases, Forms Runtime, or Workflow Engine)

All module suites, the manifest registry, dependency/boundary checks, 59 WebUI permutations, bundle budgets, seven Playwright conformance tests, and module-specific UI checks passed through tools/checks/check-focused.sh.

Completed the Cases / Records / Forms Runtime / Portal / service-interactions rollout cluster. - Cases: `eab2f4b` (`privacy.dsar.cases`) - Forms Runtime: `2ea7afa` (`privacy.dsar.forms_runtime`) - Portal: `6f671f6` (reviewed no-persistence/no-provider boundary) - Records: `38f203a` (`privacy.dsar.records`) - Services: `a7998a5` (`privacy.dsar.services`; catalogue attribution, with runtime effects owned by Cases, Forms Runtime, or Workflow Engine) All module suites, the manifest registry, dependency/boundary checks, 59 WebUI permutations, bundle budgets, seven Playwright conformance tests, and module-specific UI checks passed through `tools/checks/check-focused.sh`.
zemion commented 2026-08-21 03:49:35 +02:00
Author
Owner
Copy Link
Copy Source

Completed the derived-data and orchestration wave:

  • Search 016136f (#5)
  • Reporting eb6742a (#9)
  • Datasources f03497b (#8)
  • Dataflow 6767905 (#21)
  • Workflow Engine ceb61b5 (#2)

All five providers are tenant-scoped, bounded, fail closed on conflicting selectors, minimize exported records, provide governed erasure plans, and document the user/admin consequences. The full workspace focused gate passed, including backend suites, manifest and boundary checks, every WebUI module permutation and bundle budget, and all 7 Playwright UI-conformance tests.

Completed the derived-data and orchestration wave: - Search `016136f` (#5) - Reporting `eb6742a` (#9) - Datasources `f03497b` (#8) - Dataflow `6767905` (#21) - Workflow Engine `ceb61b5` (#2) All five providers are tenant-scoped, bounded, fail closed on conflicting selectors, minimize exported records, provide governed erasure plans, and document the user/admin consequences. The full workspace focused gate passed, including backend suites, manifest and boundary checks, every WebUI module permutation and bundle budget, and all 7 Playwright UI-conformance tests.
zemion commented 2026-08-21 04:43:55 +02:00
Author
Owner
Copy Link
Copy Source

Verified and completed the next governed DSAR provider wave:

All seven commits are pushed and their owning issues are closed. The final cross-module gate passed in the combined workspace: static contracts/manifests and dependency boundaries, all backend suites, 59 WebUI module permutations with bundle budgets, and 7/7 Playwright conformance tests.

The next high-value provider candidates are Identity + Identity Trust; Approvals + Decisions; Voting + Poll + Committee; Risk Compliance; and Connectors + Encryption. The smaller configuration/definition stores (Templates, Forms, Admin, Policy, Mandates, Projects, and Distribution Lists) should follow or receive an explicit reviewed no-provider rationale. The umbrella remains open until that inventory and the zero-unexplained-gap integration matrix are complete.

Verified and completed the next governed DSAR provider wave: - GovOPlaN/govoplan-dashboard#4 — `f8305f1` (`privacy.dsar.dashboard`) - GovOPlaN/govoplan-quick-access#2 — `eaca788` (`privacy.dsar.quick_access`) - GovOPlaN/govoplan-views#5 — `266f5da` (`privacy.dsar.views`) - GovOPlaN/govoplan-notifications#5 — `975d90b` (`privacy.dsar.notifications`) - GovOPlaN/govoplan-audit#9 — `869891f` (`privacy.dsar.audit`) - GovOPlaN/govoplan-tasks#4 — `88bd0e6` (`privacy.dsar.tasks`) - GovOPlaN/govoplan-payments#2 — `e08bc8b` (`privacy.dsar.payments`) All seven commits are pushed and their owning issues are closed. The final cross-module gate passed in the combined workspace: static contracts/manifests and dependency boundaries, all backend suites, 59 WebUI module permutations with bundle budgets, and 7/7 Playwright conformance tests. The next high-value provider candidates are Identity + Identity Trust; Approvals + Decisions; Voting + Poll + Committee; Risk Compliance; and Connectors + Encryption. The smaller configuration/definition stores (Templates, Forms, Admin, Policy, Mandates, Projects, and Distribution Lists) should follow or receive an explicit reviewed no-provider rationale. The umbrella remains open until that inventory and the zero-unexplained-gap integration matrix are complete.
zemion commented 2026-08-21 12:36:23 +02:00
Author
Owner
Copy Link
Copy Source

Completed the governed DSAR adoption wave:

All seven providers include explicit subject matching and narrowing, bounded/minimized exports, sensitive-data exclusions, lifecycle classifications, automated tests, and manifest-driven user/administrator documentation. Remote main heads were verified after push.

Workspace verification passed with tools/checks/check-focused.sh, including manifest and dependency-boundary checks, backend suites, 59 WebUI module permutations, seven Playwright conformance tests, and module-specific frontend checks.

The remaining schema-owning inventory is: Risk Compliance, Encryption, Connectors, Distribution Lists, Projects, Templates, Admin, Forms, Mandates, and Policy. A sensible next wave is Risk Compliance plus Connectors/Encryption, followed by the configuration and definition stores.

Completed the governed DSAR adoption wave: - GovOPlaN/govoplan-identity#4 — `b5017ac` - GovOPlaN/govoplan-identity-trust#3 — `8d1ca49` - GovOPlaN/govoplan-approvals#4 — `5d3eeb0` - GovOPlaN/govoplan-decisions#1 — `e6ea0d6` - GovOPlaN/govoplan-voting#7 — `7e03fe6` - GovOPlaN/govoplan-poll#4 — `02ec542` - GovOPlaN/govoplan-committee#4 — `049ea80` All seven providers include explicit subject matching and narrowing, bounded/minimized exports, sensitive-data exclusions, lifecycle classifications, automated tests, and manifest-driven user/administrator documentation. Remote main heads were verified after push. Workspace verification passed with `tools/checks/check-focused.sh`, including manifest and dependency-boundary checks, backend suites, 59 WebUI module permutations, seven Playwright conformance tests, and module-specific frontend checks. The remaining schema-owning inventory is: Risk Compliance, Encryption, Connectors, Distribution Lists, Projects, Templates, Admin, Forms, Mandates, and Policy. A sensible next wave is Risk Compliance plus Connectors/Encryption, followed by the configuration and definition stores.
zemion commented 2026-08-21 13:53:22 +02:00
Author
Owner
Copy Link
Copy Source

Completed the remaining schema-owning module rollout in ten pushed and verified slices: risk-compliance#9, connectors#17, encryption#6, dist-lists#9, projects#3, templates#6, admin#10, forms#6, mandates#1, and policy#13. Each issue records its commit and focused tests; the 68-manifest registry and full focused workspace gate pass. The umbrella remains open only for an explicit cross-module coverage matrix/check that explains every active module without a provider.

Completed the remaining schema-owning module rollout in ten pushed and verified slices: risk-compliance#9, connectors#17, encryption#6, dist-lists#9, projects#3, templates#6, admin#10, forms#6, mandates#1, and policy#13. Each issue records its commit and focused tests; the 68-manifest registry and full focused workspace gate pass. The umbrella remains open only for an explicit cross-module coverage matrix/check that explains every active module without a provider.
zemion commented 2026-08-21 14:18:35 +02:00
Author
Owner
Copy Link
Copy Source

Completed and verified.

  • govoplan@26a6681 adds a strict workspace DSAR conformance gate, a reviewed exemption registry, and a generated 68-module evidence matrix. It also runs the gate from focused checks and the release-tag path.
  • govoplan-access@fa0c85e documents the existing Access DSAR capability, eliminating the final provider-documentation gap.
  • Coverage result: 44 canonical providers + 24 reviewed no-store rationales = 68 active modules, with zero unexplained gaps.
  • tools/checks/check-focused.sh passed end to end: backend/composition suites, manifest and DSAR gates, 59 WebUI module permutations, full-product bundle budgets, seven Playwright conformance tests, and downstream module checks.

The generated matrix is docs/evidence/snapshots/DSAR_PROVIDER_COVERAGE.generated.md; future drift now fails CI/release validation.

Completed and verified. - `govoplan@26a6681` adds a strict workspace DSAR conformance gate, a reviewed exemption registry, and a generated 68-module evidence matrix. It also runs the gate from focused checks and the release-tag path. - `govoplan-access@fa0c85e` documents the existing Access DSAR capability, eliminating the final provider-documentation gap. - Coverage result: 44 canonical providers + 24 reviewed no-store rationales = 68 active modules, with zero unexplained gaps. - `tools/checks/check-focused.sh` passed end to end: backend/composition suites, manifest and DSAR gates, 59 WebUI module permutations, full-product bundle budgets, seven Playwright conformance tests, and downstream module checks. The generated matrix is `docs/evidence/snapshots/DSAR_PROVIDER_COVERAGE.generated.md`; future drift now fails CI/release validation.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
area/api
HTTP API contracts, routers, schemas, or API smoke behavior.
 area/auth
Authentication, sessions, access bootstrap, or login behavior.
 area/db
Database sessions, models, transactions, or persistence primitives.
 area/devex
Local developer workflow, scripts, tests, tooling, or release helpers.
 area/docs
Durable documentation and project guidance.
 area/governance
Governance policy, audit, privacy, retention, or compliance behavior.
 area/marketing
Public website, product messaging, publication copy, or legal page content.
 area/migrations
Alembic migrations, schema bootstrap, or persistence evolution.
 area/module-system
Module discovery, manifests, capabilities, routing, or optional integrations.
 area/rbac
Permissions, roles, delegation, or authorization policy.
 area/release
Versioning, release locks, tags, packaging, or dependency pins.
 area/security
Security posture, static analysis, supply-chain hardening, or vulnerability remediation.
 area/tenancy
Tenant boundaries, provisioning, or tenant-scoped data behavior.
 area/webui
Shared WebUI shell, frontend components, routing, or frontend tests.
 audit/complexity
Complexity finding from Radon, Xenon, or equivalent maintainability scans.
 audit/duplication
Duplicated-code finding from jscpd or equivalent similarity scans.
 audit/false-positive
Audit finding reviewed as a narrow false positive or acceptable risk.
 audit/needs-design
Audit finding that needs an architectural or product decision before implementation.
 audit/quick-fix
Audit finding that appears narrow and directly fixable.
 audit/structural
Audit finding that needs design, refactoring, or behavior review.
 codex/needs-human
Needs an explicit human decision before Codex should implement.
 codex/ready
Suitable for Codex to pick up with the existing issue context.
 module/access
GovOPlaN access, identity, authentication, RBAC, and administration behavior.
 module/addresses
GovOPlaN Addresses module behavior or integration.
 module/admin
GovOPlaN Admin module behavior or integration.
 module/appointments
GovOPlaN Appointments module behavior or integration.
 module/approvals
GovOPlaN Approvals module behavior or integration.
 module/audit
GovOPlaN Audit module behavior or integration.
 module/calendar
GovOPlaN Calendar module behavior or integration.
 module/campaign
GovOPlaN campaign module behavior or integration.
 module/cases
GovOPlaN Cases module behavior or integration.
 module/committee
GovOPlaN Committee module behavior or integration.
 module/connectors
GovOPlaN Connectors module behavior or integration.
 module/core
GovOPlaN core runner, shared primitives, shell, or extension points.
 module/dashboard
GovOPlaN Dashboard module behavior or integration.
 module/dataflow
GovOPlaN Dataflow module behavior or integration.
 module/datasources
GovOPlaN governed datasource contracts, catalogs, and integrations.
 module/decisions
GovOPlaN formal Decisions module behavior or integration.
 module/dist-lists
GovOPlaN Distribution Lists module behavior or integration.
 module/dms
GovOPlaN Dms module behavior or integration.
 module/docs
GovOPlaN Docs module behavior or integration.
 module/encryption
GovOPlaN Encryption key custody, cryptographic policy, and E2EE integration.
 module/erp
GovOPlaN Erp module behavior or integration.
 module/evaluation
GovOPlaN Evaluation module behavior or integration.
 module/files
GovOPlaN files module behavior or integration.
 module/fit-connect
GovOPlaN Fit Connect module behavior or integration.
 module/forms
GovOPlaN Forms module behavior or integration.
 module/forms-runtime
GovOPlaN Forms Runtime module behavior or integration.
 module/helpdesk
GovOPlaN Helpdesk module behavior or integration.
 module/identity
GovOPlaN Identity module behavior or integration.
 module/identity-trust
GovOPlaN Identity Trust module behavior or integration.
 module/idm
GovOPlaN Idm module behavior or integration.
 module/ledger
GovOPlaN Ledger module behavior or integration.
 module/mail
GovOPlaN mail module behavior or integration.
 module/mandates
GovOPlaN Mandates, jurisdiction, responsibility, and authority behavior or integration.
 module/notifications
GovOPlaN Notifications module behavior or integration.
 module/ops
GovOPlaN Ops module behavior or integration.
 module/organizations
GovOPlaN Organizations module behavior or integration.
 module/parties
GovOPlaN procedure Parties, representation, and delivery-authority behavior or integration.
 module/payments
GovOPlaN Payments module behavior or integration.
 module/permits
GovOPlaN Permits module behavior or integration.
 module/policy
GovOPlaN Policy module behavior or integration.
 module/poll
GovOPlaN Poll module behavior or integration.
 module/portal
GovOPlaN Portal module behavior or integration.
 module/postbox
GovOPlaN Postbox module behavior or integration.
 module/projects
GovOPlaN Projects module behavior or integration.
 module/quick-access
GovOPlaN configurable task-local Quick Access behavior and integrations.
 module/records
GovOPlaN Records and eAkte lifecycle behavior or integration.
 module/reporting
GovOPlaN Reporting module behavior or integration.
 module/risk-compliance
GovOPlaN Risk Compliance module behavior or integration.
 module/scheduling
GovOPlaN Scheduling module behavior or integration.
 module/search
GovOPlaN Search module behavior or integration.
 module/services
GovOPlaN versioned institutional Services behavior or integration.
 module/tasks
GovOPlaN Tasks module behavior or integration.
 module/templates
GovOPlaN Templates module behavior or integration.
 module/tenancy
GovOPlaN Tenancy module behavior or integration.
 module/tickets
GovOPlaN Tickets module behavior or integration.
 module/views
GovOPlaN governed task views, interface projections, and workflow view integration.
 module/voting
GovOPlaN Voting module behavior or integration.
 module/wiki
GovOPlaN Wiki module behavior or integration.
 module/workflow
GovOPlaN Workflow module behavior or integration.
 module/workflow-engine
GovOPlaN Workflow Engine runtime, persistence, or integration.
 module/xoev
GovOPlaN Xoev module behavior or integration.
 module/xrechnung
GovOPlaN Xrechnung module behavior or integration.
 module/xta-osci
GovOPlaN Xta Osci module behavior or integration.
priority
p0
Immediate stop-the-line priority.
priority
p1
High priority for the next focused work window.
priority
p2
Normal planned priority.
priority
p3
Low priority or opportunistic cleanup.
source/backlog-import
Imported from markdown backlog, roadmap, plan, or TODO files.
 source/security-audit
Created from a structured security or code-quality audit report.
 source/todo-scan
Imported from inline TODO/FIXME/HACK markers by the Gitea TODO importer.
status
blocked
Cannot progress without a decision, dependency, credential, or external change.
status
in-progress
Currently being worked.
status
needs-info
Needs clarifying input before implementation can proceed safely.
status
ready
Ready for implementation.
status
triage
Needs review, ownership, priority, or acceptance criteria.
type
bug
A reproducible defect, regression, or incorrect behavior.
type
debt
Cleanup, refactoring, risk reduction, or deferred engineering work.
type
docs
Documentation, process, or developer workflow work.
type
feature
New user-visible behavior or platform capability.
type
task
Implementation, maintenance, migration, or operational work.
type
user-story
End-to-end user journey or real-world process story used to steer product slices.
No labels area/governance area/security codex/ready
priority
p1
status
ready
type
task
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
govoplan-package-publisher zemion (Albrecht Degering)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: GovOPlaN/govoplan#47