feat(security): audit batch C — data posture, retention, DP keys (#22)

2026-07-02 10:13:07 +02:00
parent b905c93884
commit 2b19bddf7b
8 changed files with 286 additions and 2 deletions
@@ -60,6 +60,11 @@ public static class DependencyInjection
        services.AddScoped<IDigestService, DigestService>();
        services.AddHostedService<DigestWorker>();

+        // AUDIT H-3: opt-in local data retention (worker no-ops while disabled).
+        services.Configure<DataRetentionOptions>(config.GetSection(DataRetentionOptions.SectionName));
+        services.AddScoped<Retention.RetentionService>();
+        services.AddHostedService<Retention.RetentionWorker>();
+
        // HTTP clients
        // V-01: do NOT follow redirects — a validated external URL must not be able to
        // 3xx-redirect into an internal target after SafeHttpGuard has checked it.