crypto-shredding

Operator-level crypto-shredding trigger. forget-subject erases a user or tenant subject key in the configured KMS adapter, making every PII field encrypted under it permanently unreadable (reads render the [[erased]] sentinel), and appends a subject-forgotten audit event. Requires a KMS adapter (runProdApp({ kms })). The automated Art.-17 deletion pipeline in user-data-rights erases keys itself; this command covers manual forgets (authority requests, operator recovery, tenant destroy).

How it fits

The write commands this feature provides (Provides).

flowchart TB
  n_crypto_shredding["crypto-shredding"]
  subgraph how_provides["Provides"]
    n_cmd_crypto_shredding_write_forget_subject(["forget-subject"])
  end
  n_crypto_shredding --> n_cmd_crypto_shredding_write_forget_subject

Provides — write commands this feature registers (dispatch them through the command bus):

• crypto-shredding:write:forget-subject

Dependencies

• Requires: none
• Activation: always on (not toggleable)