feat(security): audit batch C — data posture, retention, DP keys #22
Reference in New Issue
Block a user
Delete Branch "fix/audit-data-protection"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Audit batch C (H-3 doc+retention, M-3, L-2/L-4): SECURITY.md posture doc, opt-in retention purge worker (+3 tests), optional cert protection for DP keys. 51/51 tests.
🤖 Generated with Claude Code
Implements AUDIT_REPORT.md H-3 (doc + retention), M-3, L-2/L-4 guidance: - SECURITY.md: the deliberate data-at-rest posture (plaintext bodies + why, volume encryption + backup guidance, DB TLS note, AllowedHosts note, production checklist, delete-my-data procedure). - Opt-in local data retention: DataRetention:{PurgeTrashedAfterDays,PurgeAllAfterDays} (0 = disabled, no behaviour change) + daily RetentionWorker purging only the LOCAL copy (Gmail untouched). 3 tests lock disabled-is-noop and purge-scoping. - M-3: optional X.509 protection for the Data Protection key ring (DataProtection:CertificatePath/Password) so keys are no longer necessarily plaintext next to the ciphertext they protect. Full suite: 51/51 green. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>