crypto-shredding

Operator-level crypto-shredding trigger. forget-subject erases a user or tenant subject key in the configured KMS adapter, making every PII field encrypted under it permanently unreadable (reads render the [[erased]] sentinel), and appends a subject-forgotten audit event. Requires a KMS adapter (runProdApp({ kms })). The automated Art.-17 deletion pipeline in user-data-rights erases keys itself; this command covers manual forgets (authority requests, operator recovery, tenant destroy).

How it fits

What this feature needs to run (Requires, top) and the write commands it provides (Provides, bottom).

flowchart TB
  n_crypto_shredding["crypto-shredding"]
  subgraph how_provides["Provides"]
    n_cmd_crypto_shredding_write_forget_subject(["forget-subject"])
  end
  n_crypto_shredding --> n_cmd_crypto_shredding_write_forget_subject

Provides — write commands this feature registers (dispatch them through the command bus):

• crypto-shredding:write:forget-subject

Dependencies

• Requires: none
• Activation: always on (not toggleable)