Add governed DSAR coverage for explicit Tasks #4

New Issue

2026-08-21T04:16:35+02:00

zemion commented

2026-08-21 04:16:35 +02:00

Goal

Cover account-assigned explicit Tasks and task-operator attribution in the Core data-subject request workflow tracked by GovOPlaN/govoplan#47.

Scope

provide and document privacy.dsar.tasks
correlate exact tenant/account assignment and actor identifiers
export bounded assigned-task content, matching personal assignments, lifecycle state, and source references
export minimized create/update/complete actor attribution when the subject is not directly assigned
avoid scanning arbitrary provenance or metadata and never traverse source-module records
retain immutable attribution and require manual review for assignment/content erasure
add optional exact task references and Core workflow tests

Acceptance criteria

unrelated tasks, assignments, and tenants cannot be discovered
group/role/function visibility is not inferred from external directories
only subject-matching account assignments are exposed
source records, provenance, metadata, request hashes, and idempotency keys are excluded
no automatic action can corrupt shared or institutional work state
focused tests, Ruff, and manifest checks pass

## Goal Cover account-assigned explicit Tasks and task-operator attribution in the Core data-subject request workflow tracked by GovOPlaN/govoplan#47. ## Scope - provide and document `privacy.dsar.tasks` - correlate exact tenant/account assignment and actor identifiers - export bounded assigned-task content, matching personal assignments, lifecycle state, and source references - export minimized create/update/complete actor attribution when the subject is not directly assigned - avoid scanning arbitrary provenance or metadata and never traverse source-module records - retain immutable attribution and require manual review for assignment/content erasure - add optional exact task references and Core workflow tests ## Acceptance criteria - unrelated tasks, assignments, and tenants cannot be discovered - group/role/function visibility is not inferred from external directories - only subject-matching account assignments are exposed - source records, provenance, metadata, request hashes, and idempotency keys are excluded - no automatic action can corrupt shared or institutional work state - focused tests, Ruff, and manifest checks pass

zemion commented

2026-08-21 04:21:15 +02:00

Implemented and pushed in 88bd0e6.

Tasks now provides privacy.dsar.tasks with exact tenant/account correlation for direct account assignments and exact actor attribution for create, update, and completion activity. Assigned-task exports are bounded and include only matching personal assignments and source references; arbitrary provenance, metadata, hashes, idempotency keys, other assignment targets, and source payloads are excluded. Institutional task mutation remains manual-review/retain only. Verification: 15 tests passed, Ruff passed, and the 68/68 manifest registry check passed.

Implemented and pushed in `88bd0e6`. Tasks now provides `privacy.dsar.tasks` with exact tenant/account correlation for direct account assignments and exact actor attribution for create, update, and completion activity. Assigned-task exports are bounded and include only matching personal assignments and source references; arbitrary provenance, metadata, hashes, idempotency keys, other assignment targets, and source payloads are excluded. Institutional task mutation remains manual-review/retain only. Verification: 15 tests passed, Ruff passed, and the 68/68 manifest registry check passed.

zemion closed this issue

2026-08-21 04:21:16 +02:00

zemion referenced this issue from GovOPlaN/govoplan

2026-08-21 04:43:55 +02:00

[Privacy] Complete DSAR provider coverage across data-owning modules #47

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: GovOPlaN/govoplan-tasks#4