R-901: a deleted customer's audit rows go 1 year after the deletion (hub, unreleased); ep0-copy removal job written, not installed (decision 181); both times in the privacy draft

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-08 09:54:39 +02:00
parent 97c260c56b
commit 05becb04d0
10 changed files with 463 additions and 7 deletions
@@ -1029,6 +1029,12 @@ func pruneAll(s *store.Store, maxDays int, logger *log.Logger) {
 	} else if n > 0 {
 		logger.Printf("[INFO] Pruned %d stale app issues", n)
 	}
+	// R-901 (`09` §3 decision 181): a deleted customer's audit rows go 1 year after the deletion.
+	if ev, nl, err := s.PruneDeletedCustomerAudit(time.Now().UTC(), store.DeletedCustomerAuditKeep); err != nil {
+		logger.Printf("[ERROR] Prune deleted customers' audit rows: %v", err)
+	} else if ev+nl > 0 {
+		logger.Printf("[INFO] Pruned a deleted customer's audit rows (older than 1 year after the deletion): events=%d notification_log=%d", ev, nl)
+	}
 }

 // runUnsealBoxSecrets is `felhom-hub -unseal-box-secrets` (R-879 roll-back). It installs the sealing key