12 KiB
12 KiB
DSAR Provider Coverage
This generated matrix is enforced by tools/checks/check-dsar-coverage.py.
A migration-owning module must register and document its canonical DSAR provider.
Every other active module requires a reviewed explanation of why it owns no
persistent subject-data store. Adding a migration invalidates that explanation.
- Active modules: 68
- Registered and documented DSAR providers: 44
- Reviewed no-store rationales: 24
- Unexplained coverage gaps: 0
| Module | Repository | Persistence | Coverage | Rationale |
|---|---|---|---|---|
access |
govoplan-access |
Migration-owned | Provider | Provider privacy.dsar.access is registered and documented. |
addresses |
govoplan-addresses |
Migration-owned | Provider | Provider privacy.dsar.addresses is registered and documented. |
admin |
govoplan-admin |
Migration-owned | Provider | Provider privacy.dsar.admin is registered and documented. |
approvals |
govoplan-approvals |
Migration-owned | Provider | Provider privacy.dsar.approvals is registered and documented. |
assets |
govoplan-assets |
No module migration | Reviewed no-store rationale | Contract-only module: asset persistence and lifecycle APIs are not implemented; reassess before adding a migration-owned store. |
audit |
govoplan-audit |
Migration-owned | Provider | Provider privacy.dsar.audit is registered and documented. |
booking |
govoplan-booking |
No module migration | Reviewed no-store rationale | Contract-only module: booking persistence and reservation workflows are not implemented; reassess before adding a migration-owned store. |
calendar |
govoplan-calendar |
Migration-owned | Provider | Provider privacy.dsar.calendar is registered and documented. |
campaigns |
govoplan-campaign |
Migration-owned | Provider | Provider privacy.dsar.campaigns is registered and documented. |
cases |
govoplan-cases |
Migration-owned | Provider | Provider privacy.dsar.cases is registered and documented. |
certificates |
govoplan-certificates |
No module migration | Reviewed no-store rationale | Contract-only module: certificate issuance and revocation persistence are not implemented; reassess before adding a migration-owned store. |
committee |
govoplan-committee |
Migration-owned | Provider | Provider privacy.dsar.committee is registered and documented. |
connectors |
govoplan-connectors |
Migration-owned | Provider | Provider privacy.dsar.connectors is registered and documented. |
consultation |
govoplan-consultation |
No module migration | Reviewed no-store rationale | Contract-only module: consultation submissions and evaluation persistence are not implemented; reassess before adding a migration-owned store. |
contracts |
govoplan-contracts |
No module migration | Reviewed no-store rationale | Contract-only module: contract, amendment, and obligation persistence are not implemented; reassess before adding a migration-owned store. |
dashboard |
govoplan-dashboard |
Migration-owned | Provider | Provider privacy.dsar.dashboard is registered and documented. |
dataflow |
govoplan-dataflow |
Migration-owned | Provider | Provider privacy.dsar.dataflow is registered and documented. |
datasources |
govoplan-datasources |
Migration-owned | Provider | Provider privacy.dsar.datasources is registered and documented. |
decisions |
govoplan-decisions |
Migration-owned | Provider | Provider privacy.dsar.decisions is registered and documented. |
dist_lists |
govoplan-dist-lists |
Migration-owned | Provider | Provider privacy.dsar.dist_lists is registered and documented. |
docs |
govoplan-docs |
No module migration | Reviewed no-store rationale | Projection-only module: documentation is contributed by owning manifests and providers; Docs has no migration-owned subject store. |
encryption |
govoplan-encryption |
Migration-owned | Provider | Provider privacy.dsar.encryption is registered and documented. |
evaluation |
govoplan-evaluation |
No module migration | Reviewed no-store rationale | Contract-only module: evaluation runs, responses, and scores are not persisted; reassess before adding a migration-owned store. |
facilities |
govoplan-facilities |
No module migration | Reviewed no-store rationale | Contract-only module: facility and maintenance persistence are not implemented; reassess before adding a migration-owned store. |
files |
govoplan-files |
Migration-owned | Provider | Provider privacy.dsar.files is registered and documented. |
forms |
govoplan-forms |
Migration-owned | Provider | Provider privacy.dsar.forms is registered and documented. |
forms_runtime |
govoplan-forms-runtime |
Migration-owned | Provider | Provider privacy.dsar.forms_runtime is registered and documented. |
grants |
govoplan-grants |
No module migration | Reviewed no-store rationale | Contract-only module: grant applications, awards, and monitoring are not persisted; reassess before adding a migration-owned store. |
helpdesk |
govoplan-helpdesk |
No module migration | Reviewed no-store rationale | Contract-only module: helpdesk requests, queues, and resolutions are not persisted; reassess before adding a migration-owned store. |
identity |
govoplan-identity |
Migration-owned | Provider | Provider privacy.dsar.identity is registered and documented. |
identity_trust |
govoplan-identity-trust |
Migration-owned | Provider | Provider privacy.dsar.identity_trust is registered and documented. |
idm |
govoplan-idm |
Migration-owned | Provider | Provider privacy.dsar.idm is registered and documented. |
inspections |
govoplan-inspections |
No module migration | Reviewed no-store rationale | Contract-only module: inspections, findings, and measures are not persisted; reassess before adding a migration-owned store. |
learning |
govoplan-learning |
No module migration | Reviewed no-store rationale | Contract-only module: learning offers, enrollment, and completion are not persisted; reassess before adding a migration-owned store. |
mail |
govoplan-mail |
Migration-owned | Provider | Provider privacy.dsar.mail is registered and documented. |
mandates |
govoplan-mandates |
Migration-owned | Provider | Provider privacy.dsar.mandates is registered and documented. |
notifications |
govoplan-notifications |
Migration-owned | Provider | Provider privacy.dsar.notifications is registered and documented. |
ops |
govoplan-ops |
No module migration | Reviewed no-store rationale | Projection-only module: Ops reads bounded platform and provider status; durable recovery evidence remains owned by Core and domain modules. |
organizations |
govoplan-organizations |
Migration-owned | Provider | Provider privacy.dsar.organizations is registered and documented. |
parties |
govoplan-parties |
Migration-owned | Provider | Provider privacy.dsar.parties is registered and documented. |
payments |
govoplan-payments |
Migration-owned | Provider | Provider privacy.dsar.payments is registered and documented. |
permits |
govoplan-permits |
No module migration | Reviewed no-store rationale | Contract-only module: permit applications, assessments, and decisions are not persisted; reassess before adding a migration-owned store. |
policy |
govoplan-policy |
Migration-owned | Provider | Provider privacy.dsar.policy is registered and documented. |
poll |
govoplan-poll |
Migration-owned | Provider | Provider privacy.dsar.poll is registered and documented. |
portal |
govoplan-portal |
No module migration | Reviewed no-store rationale | Projection-only module: Portal stores no applicant records; Services, Forms Runtime, Cases, and Postbox own and export authoritative subject data. |
postbox |
govoplan-postbox |
Migration-owned | Provider | Provider privacy.dsar.postbox is registered and documented. |
procurement |
govoplan-procurement |
No module migration | Reviewed no-store rationale | Contract-only module: procurement procedures, tenders, and awards are not persisted; reassess before adding a migration-owned store. |
projects |
govoplan-projects |
Migration-owned | Provider | Provider privacy.dsar.projects is registered and documented. |
quick_access |
govoplan-quick-access |
Migration-owned | Provider | Provider privacy.dsar.quick_access is registered and documented. |
records |
govoplan-records |
Migration-owned | Provider | Provider privacy.dsar.records is registered and documented. |
reporting |
govoplan-reporting |
Migration-owned | Provider | Provider privacy.dsar.reporting is registered and documented. |
resources |
govoplan-resources |
No module migration | Reviewed no-store rationale | Contract-only module: resource catalog and allocation persistence are not implemented; reassess before adding a migration-owned store. |
rest |
govoplan-rest |
No module migration | Reviewed no-store rationale | Transport-only module: REST binds explicitly published functions and owns no domain or subject-data store. |
risk_compliance |
govoplan-risk-compliance |
Migration-owned | Provider | Provider privacy.dsar.risk_compliance is registered and documented. |
scheduling |
govoplan-scheduling |
Migration-owned | Provider | Provider privacy.dsar.scheduling is registered and documented. |
search |
govoplan-search |
Migration-owned | Provider | Provider privacy.dsar.search is registered and documented. |
services |
govoplan-services |
Migration-owned | Provider | Provider privacy.dsar.services is registered and documented. |
soap |
govoplan-soap |
No module migration | Reviewed no-store rationale | Transport-only module: SOAP binds explicitly published operations and owns no domain or subject-data store. |
tasks |
govoplan-tasks |
Migration-owned | Provider | Provider privacy.dsar.tasks is registered and documented. |
templates |
govoplan-templates |
Migration-owned | Provider | Provider privacy.dsar.templates is registered and documented. |
tenancy |
govoplan-tenancy |
No module migration | Reviewed no-store rationale | Orchestration module: tenant lifecycle and settings use Core-owned storage; Access covers account and membership subject data. |
tickets |
govoplan-tickets |
No module migration | Reviewed no-store rationale | Contract-only module: ticket, queue, SLA, and adapter persistence are not implemented; reassess before adding a migration-owned store. |
transparency |
govoplan-transparency |
No module migration | Reviewed no-store rationale | Contract-only module: requests, disclosure reviews, and publications are not persisted; reassess before adding a migration-owned store. |
views |
govoplan-views |
Migration-owned | Provider | Provider privacy.dsar.views is registered and documented. |
voting |
govoplan-voting |
Migration-owned | Provider | Provider privacy.dsar.voting is registered and documented. |
wiki |
govoplan-wiki |
No module migration | Reviewed no-store rationale | Contract-only module: wiki spaces, pages, and revisions are not persisted; reassess before adding a migration-owned store. |
workflow |
govoplan-workflow |
No module migration | Reviewed no-store rationale | Presentation-only module: Workflow edits and projects Workflow Engine state; Workflow Engine owns persistence and DSAR coverage. |
workflow_engine |
govoplan-workflow-engine |
Migration-owned | Provider | Provider privacy.dsar.workflow_engine is registered and documented. |
Provider search, export minimization, retention, and erasure behavior remains documented and tested by each owning module. This matrix verifies adoption and ownership coverage; Core continues to test disabled providers, partial failure, retry, authorization evidence, and horizontally coordinated execution.