api-images: immediate-erasure endpoint (GDPR/right-to-erasure) — DELETE /{id}?purge=1 or /erase/{id} that skips _trash + unlinks immediately, tenant-scoped, audit-logged.

Sub-tickets

Questions

Activity

• wi-cli-whey created · 2026-06-13
• wi-cli-whey spec · 2026-06-13
  GATED until a real erasure-request flow exists in ≥1 app — no point shipping an endpoint nothing calls. Current api soft-deletes to _trash (90d retention) = opposite of right-to-erasure; venus pacienteDni makes GDPR/erasure real. Shape: DELETE /{id}?purge=1 or /erase/{id}, skips _trash, unlinks immediately, tenant-scoped, audit-logged. From práctica-deletion brainstorm (evolutiva umbrella).