feat: retention and wipe with crypto-shredding; QQQ RC.6 (phase f) #11

Merged

KofTwentyTwo merged 1 commits from feature/retention-and-wipe into develop

2026-10-14 12:42:40 +00:00

Author	SHA1	Message	Date
james.maesandClaude Opus 5.5	470b0bd214	feat: retention and wipe with crypto-shredding; move to QQQ RC.6 (phase f) Moves the pin to QQQ 4.1.0-RC.6 and removes the stand-ins RC.6 provides (classification, client channels, table features, the UI API extension point). Adds retention rules, wipe markers, legal holds, wipe runs and the per-record-per-field audit key table; the wipe process (null with marker, overwrite, keyed hash, delete, archive then wipe) runs in one transaction per batch, destroying the audit keys with the field updates; the audit protector and key source (AES-GCM wrapped DEKs, AAD-bound); the backups warning; canary and wipe-proof tests. Fixes a key-source bug that zeroed each DEK after returning it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-14 07:35:45 -05:00

Author

SHA1

Message

Date

james.maesandClaude Opus 5.5

470b0bd214

feat: retention and wipe with crypto-shredding; move to QQQ RC.6 (phase f)

Moves the pin to QQQ 4.1.0-RC.6 and removes the stand-ins RC.6 provides
(classification, client channels, table features, the UI API extension
point). Adds retention rules, wipe markers, legal holds, wipe runs and the
per-record-per-field audit key table; the wipe process (null with marker,
overwrite, keyed hash, delete, archive then wipe) runs in one transaction
per batch, destroying the audit keys with the field updates; the audit
protector and key source (AES-GCM wrapped DEKs, AAD-bound); the backups
warning; canary and wipe-proof tests.

Fixes a key-source bug that zeroed each DEK after returning it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-14 07:35:45 -05:00