Add governed DSAR coverage for identity trust evidence #3

New Issue

2026-08-21T11:55:21+02:00

zemion commented

2026-08-21 11:55:21 +02:00

Goal

Cover tenant-scoped device keys, assurance evidence, key epochs, and key-access decisions in the Core data-subject request workflow tracked by GovOPlaN/govoplan#47.

Scope

provide and document privacy.dsar.identity_trust
correlate exact tenant, account, identity, device, and key selectors
export bounded public-key registration and assurance metadata without operational secrets or provenance payloads
expose minimized immutable key-access and epoch evidence
require manual review for device-key revocation and retain assurance/access evidence
add focused provider and Core workflow coverage

Acceptance criteria

unrelated tenants and subjects cannot be discovered
private/opaque provenance, request digests, idempotency keys, and arbitrary payloads are excluded
no automatic erasure can break encrypted-resource access or assurance history
focused tests, Ruff, and manifest checks pass

## Goal Cover tenant-scoped device keys, assurance evidence, key epochs, and key-access decisions in the Core data-subject request workflow tracked by GovOPlaN/govoplan#47. ## Scope - provide and document `privacy.dsar.identity_trust` - correlate exact tenant, account, identity, device, and key selectors - export bounded public-key registration and assurance metadata without operational secrets or provenance payloads - expose minimized immutable key-access and epoch evidence - require manual review for device-key revocation and retain assurance/access evidence - add focused provider and Core workflow coverage ## Acceptance criteria - unrelated tenants and subjects cannot be discovered - private/opaque provenance, request digests, idempotency keys, and arbitrary payloads are excluded - no automatic erasure can break encrypted-resource access or assurance history - focused tests, Ruff, and manifest checks pass

zemion commented

2026-08-21 12:35:48 +02:00

Implemented and pushed in 8d1ca49.

Added privacy.dsar.identity_trust with account/identity/device/key scoping, public-key whitelisting, assurance and access-decision export, review safeguards, tests, and user/admin documentation.
Verified with the module test and lint suite.
Verified across the workspace with tools/checks/check-focused.sh: manifest and boundary checks, backend suites, 59 WebUI module permutations, seven Playwright conformance tests, and module-specific frontend checks all passed.

Implemented and pushed in `8d1ca49`. - Added privacy.dsar.identity_trust with account/identity/device/key scoping, public-key whitelisting, assurance and access-decision export, review safeguards, tests, and user/admin documentation. - Verified with the module test and lint suite. - Verified across the workspace with `tools/checks/check-focused.sh`: manifest and boundary checks, backend suites, 59 WebUI module permutations, seven Playwright conformance tests, and module-specific frontend checks all passed.

zemion closed this issue

2026-08-21 12:35:48 +02:00

zemion referenced this issue from GovOPlaN/govoplan

2026-08-21 12:36:23 +02:00

[Privacy] Complete DSAR provider coverage across data-owning modules #47

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: GovOPlaN/govoplan-identity-trust#3