Feature: Add Auditable Data Lifecycle and Archive Policy

[3m1n3nc3]

Description

Define soft-delete, archive, retention, erasure, and immutable audit behavior for sensitive data.

File Location

learnault-api/prisma/schema.prisma, learnault-api/src/audit/, migrations, and learnault-api/docs/DATA_LIFECYCLE.md

Design Reference

API Roadmap Phase 0: Add Auditable Data Lifecycle and Archive Policy.

Dependencies

• Status: Blocked
• Blocked by: Feature: Define Backend Domain Module Boundaries #60 (Define Backend Domain Module Boundaries) — done; Feature: Repair Clean Install and Prisma Generation #67 (Repair Clean Install and Prisma Generation) — done
• Blocks: API Phase 1 profile and account lifecycle issues

Tasks

• Classify records as mutable, archivable, deletable, or immutable
• Define retention for users, money, credentials, security events, and content
• Add immutable audit events with actor, action, target, reason, request ID, and safe metadata
• Add reusable audited mutation helper
• Exclude archived records by default
• Test immutability, visibility, attribution, and redaction

Acceptance Criteria

• Sensitive mutations are audited
• Archive behavior is deterministic
• Audit data contains no secrets or unnecessary PII
• Policy and tests pass review

Verification Evidence

• Attach lifecycle matrix, migration output, and audit/redaction tests

Difficulty

Advanced

[Cedarich]

Hello maintainer can i take up this task

[grantfox-oss]

🦊 GrantFox — @Cedarich has been assigned to this issue as part of the Third Campaign campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #124)
2. Your PR will be reviewed by the learnault maintainers

Good luck! Track your progress on GrantFox.

[grantfox-oss]

🎉 This issue has been marked as completed on GrantFox as part of the Third Campaign campaign!

@Cedarich's PR #148 was approved and merged by @3m1n3nc3.

🏆 @Cedarich: You earned 35 FoxPoints for this contribution! Your current tier: Explorer (757 total points). Track your full progress on GrantFox.

👏 Great work, @Cedarich! Keep contributing to learnault.