chore(work): tick task in 06-core-dsr

docs/work/_system/_state.json

@@ -1,5 +1,5 @@
 {
-  "updated_at": "2026-05-19T19:21:30.369Z",
+  "updated_at": "2026-05-19T19:35:11.691Z",
   "epics": {
     "binder-wrap-helper": {
       "status": "done",
@@ -296,10 +296,10 @@
           ]
         },
         "06-core-dsr": {
-          "status": "todo",
+          "status": "in-progress",
           "title": "core-dsr — scaffold, interfaces, Payload impls, recording doubles, handlers, dsrRouter",
           "ac_total": 3,
-          "ac_completed": 0,
+          "ac_completed": 1,
           "depends_on": [
             "02-audit-enum-amendment"
           ],

docs/work/epics/dsr-consent-and-cookie-banner/06-core-dsr/_story.md

@@ -3,12 +3,12 @@ id: 06-core-dsr
 epic: dsr-consent-and-cookie-banner
 title: core-dsr — scaffold, interfaces, Payload impls, recording doubles, handlers, dsrRouter
 type: technical-story
-status: todo
+status: in-progress
 feature: core-dsr
 depends-on: [02-audit-enum-amendment]
 blocks: [07-core-api-router-composition]
 created: 2026-05-19T12:00:00Z
-updated: 2026-05-19T09:55:07.020Z
+updated: 2026-05-19T19:35:11.523Z
 ---
 
 ## Goal
@@ -58,6 +58,6 @@ Every EU-bound consumer needs endpoints to satisfy GDPR Arts. 15–18 + 20. The
 
 ## Tasks
 
-- [ ] Run `pnpm turbo gen core-package dsr` + define `IDataExport`, `IDataDelete`, `IDataRectify`, `IProcessingRestriction` interfaces in `core-dsr/<interface>.interface.ts` + add `UserDataBundle` + `DeletionCertificate` types + ship `core-dsr/contexts/user-data.jsonld`; all gates pass.
+- [x] Run `pnpm turbo gen core-package dsr` + define `IDataExport`, `IDataDelete`, `IDataRectify`, `IProcessingRestriction` interfaces in `core-dsr/<interface>.interface.ts` + add `UserDataBundle` + `DeletionCertificate` types + ship `core-dsr/contexts/user-data.jsonld`; all gates pass.
 - [ ] Add `PayloadDataExport`, `PayloadDataDelete`, `PayloadDataRectify`, `PayloadProcessingRestriction` Payload-backed implementations walking `custom.pii` tags and `custom.subject` linkage (cascade semantics per role: self/owner/reference) + `RecordingDataExport`, `RecordingDataDelete`, `RecordingDataRectify`, `RecordingProcessingRestriction` test doubles in `packages/core-testing/` + DI binders `core-dsr/di/bind-production.ts` and `core-dsr/di/bind-dev-seed.ts`; contract tests covering happy path per role/mode, multi-subject row redaction, JSON-LD `@context` correctness, audit emission shape, restriction flag; all gates pass.
 - [ ] Add protocol-agnostic handlers in `core-dsr/handlers/{export,delete,rectify,restrict}-handler.ts` + `dsrRouter` tRPC router in `core-dsr/dsr.router.ts` with auth checks; integration tests asserting procedure response shapes and error passthrough; all gates pass.