2.1 KiB
2.1 KiB
id, prd, title, type, status, features, created, updated
| id | prd | title | type | status | features | created | updated | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| dsr-consent-and-cookie-banner | docs/work/prds/dsr-consent-and-cookie-banner.prd.md | DSR + consent abstraction + cookie consent banner — Epic B of ADR-025 | epic | in-progress |
|
2026-05-19T12:00:00Z | 2026-05-19T11:54:41.015Z |
Goal
Ship the user-rights surface end-to-end: DSR endpoints that walk Epic A's PII tags to export/delete/rectify/restrict any subject's data, per-use-case consent gates with audit-logged proof, and a compliant cookie consent banner with EU-prominence defaults.
Why
Epic A delivered declarative PII inventory + retention + sub-processors. Epic B closes the remaining gaps: GDPR Arts. 15–18 + 20 DSR endpoints, Art. 7 demonstrable consent with structural lint enforcement, and a CNIL-compliant cookie consent banner that downstream consumers can drop in without forking legal-compliance logic.
Stories
- 01 — Subject-linkage types in core-shared
- 02 — Audit action enum amendment (ADR-018)
- 03 — core-consent foundation: types + brand + withConsent + conformance + ESLint rule
- 04 — core-consent implementation: Payload impl + DI + migration helpers + tRPC router
- 05 — core-consent React subpath: ConsentProvider + useConsent()
- 06 — core-dsr: scaffold + interfaces + Payload impls + handlers + dsrRouter
- 07 — core-api router composition: dsrRouter + consentRouter into appRouter
- 08 — core-ui scaffold
- 09 — CookieConsentBanner component in core-ui
- 10 — auth signUp anonymous consent migration
- 11 — Documentation: DSR guide + consent guide + glossary + CLAUDE.md