No execution path for GDPR/CCPA right-to-erasure despite a defined policy map

[Abidoyesimze]

src/privacy/dataMap.ts defines an erasure policy per model:

export const erasurePolicies = {
  Session: 'DELETE',
  WebhookSubscription: 'DELETE',
  AlertRule: 'DELETE',
  Transaction: 'ANONYMIZE',
  CostBasisLot: 'ANONYMIZE',
  FiatOrder: 'ANONYMIZE',
  ReferralConversion: 'ANONYMIZE',
  AuditBlock: 'IMMUTABLE',
  OutboxOp: 'IMMUTABLE',
}

Nothing else in the repo references erasurePolicies or dataMap (grep -rln "erasurePolicies" src tests returns only the definition file itself). There is no route, controller, or job that actually performs a GDPR/CCPA-style right-to-erasure request — the policy map is defined but has no execution path.

Task

• Add an erasure job/endpoint (admin-triggered to start, self-service can follow) that, given a userId, walks erasurePolicies and applies DELETE/ANONYMIZE per model while leaving IMMUTABLE tables (audit chain, outbox) untouched.
• Support a dry-run mode that reports what would be deleted/anonymized without writing.
• Add tests covering each policy type and the immutable-table exclusion.

[Demilade10]

@Demilade10 has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hi I can fix this

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Demilade10 to this issue.

[Kappa16]

@Kappa16 has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

I would like to work on this issue, expect PR in few hours please 🙏

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Kappa16 to this issue.

[Peaostrel]

@Peaostrel has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

i can handle this quickly

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Peaostrel to this issue.

[dorismaduegbunam]

@dorismaduegbunam has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Gm Chief, I would love to take on this issue. I'm a software engineer with over four years experience and i'm confident I can resolve this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @dorismaduegbunam to this issue.

[drips-wave]

Congratulations, @dorismaduegbunam! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on August 31, 2026.

🧑‍💻 @dorismaduegbunam: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊