Ch14 Sol4a: retention sweep across every copy

Ch14 Sol4a: retention sweep across every copy A data-flow diagram generated by Archify. 01 / Stores 02 / Purge job 03 / Deletion proof 04 / Governed ends Order record · system of record · 01 / Stores · retain 365d* Order record system of record retain 365d* Cache + index · derived views · 01 / Stores · purge keys Cache + index derived views purge keys Retention sweeper · periodic purge job · 02 / Purge job · idempotent Retention sweeper periodic purge job idempotent Legal hold · blocks purge · 02 / Purge job · per matter Legal hold blocks purge per matter Tombstone log · log tombstones + watermarks · 03 / Deletion proof · restore reads it Tombstone log log tombstones + watermarks restore reads it Backups · expire by retention · 03 / Deletion proof · destroy, not keep Backups expire by retention destroy, not keep Aggregates · k>=5 or suppress · 04 / Governed ends · not auto-anonymous Aggregates k>=5 or suppress not auto-anonymous Audit log · hashes, no raw PII · 04 / Governed ends · traceable Audit log hashes, no raw PII traceable Restore gate · replay skips tombstoned · 04 / Governed ends · no resurrection Restore gate replay skips tombstoned no resurrection expired rows expired rows purge keys derived keys hold list hold list tombstone ids deletion proof expire + destroy retention expiry counts only counts only hash receipts evidence skips deleted gated replay Legend primary data policy / PII async batch data store data flow