Feature: Add Auditable Data Lifecycle and Archive Policy

[3m1n3nc3]

Description

Define soft-delete, archive, retention, erasure, and immutable audit behavior for sensitive data.

File Location

learnault-api/prisma/schema.prisma, learnault-api/src/audit/, migrations, and learnault-api/docs/DATA_LIFECYCLE.md

Design Reference

API Roadmap Phase 0: Add Auditable Data Lifecycle and Archive Policy.

Dependencies

• Status: Blocked
• Blocked by: Feature: Define Backend Domain Module Boundaries #60 (Define Backend Domain Module Boundaries) — done; Feature: Repair Clean Install and Prisma Generation #67 (Repair Clean Install and Prisma Generation) — done
• Blocks: API Phase 1 profile and account lifecycle issues

Tasks

• Classify records as mutable, archivable, deletable, or immutable
• Define retention for users, money, credentials, security events, and content
• Add immutable audit events with actor, action, target, reason, request ID, and safe metadata
• Add reusable audited mutation helper
• Exclude archived records by default
• Test immutability, visibility, attribution, and redaction

Acceptance Criteria

• Sensitive mutations are audited
• Archive behavior is deterministic
• Audit data contains no secrets or unnecessary PII
• Policy and tests pass review

Verification Evidence

• Attach lifecycle matrix, migration output, and audit/redaction tests

Difficulty

Advanced

[Cedarich]

Hello maintainer can i take up this task