feat(retention): ASVS 14.2.7 — retention classification, automatic deletion, and the legacy outbox PHI leak - #71

Open

wshallwshall wants to merge 11 commits into

mainfrom

claude/asvs-14-2-7-retention-classification

Commits on Jul 30, 2026

test(14.2.7): land the no-DB guards FIRST, so the retirement cannot ship half-done
wshallwshall
committed
feat(retention): purge orphaned reference snapshots (ASVS 14.2.7 part 1)
wshallwshall
committed
docs(phi): reference snapshots gain a bounded window — and the limit is stated (14.2.7)
wshallwshall
committed
Merge remote-tracking branch 'origin/main' into claude/asvs-14-2-7-retention-classification
wshallwshall
committed
Merge remote-tracking branch 'origin/main' into claude/asvs-14-2-7-retention-classification
wshallwshall
committed
docs(phi): the anchor that would catch tail-truncation is unreachable from the CLI
wshallwshall
committed
docs(phi): classify all 38 at-rest tiers — and four of them are UNBOUNDED (14.2.7)
wshallwshall
committed
feat(retention): generate the serve gate from the classification, not a literal (14.2.7)
wshallwshall
committed
fix(store): the legacy SQL Server `outbox` table held PHI nothing could purge (14.2.7)
wshallwshall
committed
Merge remote-tracking branch 'origin/main' into claude/asvs-14-2-7-retention-classification
wshallwshall
committed
docs(ci): three workflow comments still pointed at the pre-archive plan path
wshallwshall
committed