/**
 * GDPR Art. 16 (right to rectification).
 *
 * Allows a subject to correct inaccurate personal data held about them.
 * Implementations verify the field is PII-tagged before updating and emit a
 * RESTRICT audit entry with `reason: "art-16-request"` as the tamper-evident
 * record of the correction.
 */
export interface IDataRectify {
  /**
   * Update a single PII field for the given subject in the specified collection.
   *
   * @param subjectId  - The subject's canonical ID.
   * @param collection - Payload collection slug (e.g. "users").
   * @param field      - Name of the field to update (must be `custom.pii`-tagged).
   * @param value      - New value; must satisfy the field's Payload field type.
   */
  updateSubjectField(
    subjectId: string,
    collection: string,
    field: string,
    value: unknown,
  ): Promise<void>;
}