삭제와 소거

DELETIONS = {
    "job.deleted": "job",
    "application.deleted": "application",
    "applicant.deleted": "applicant",
    "sourced_profile.deleted": "sourced_profile",
    "list.deleted": "list",
    "list_membership.removed": "list_membership",
}


def handle_deletion(store, event):
    object_type = DELETIONS[event["type"]]
    item = event["data"]["object"]
    reason = item.get("reason")  # list events carry no reason

    # Delete for real. A soft delete that keeps the personal data in a table
    # that still answers queries is not a deletion.
    store.purge(object_type, item["id"])
    store.audit("deleted", object_type, item["id"], reason=reason)

{
  "object": "erasure",
  "id": "ers_5Nx3jLm7Qd2s",
  "action": "suppression_applied",
  "reason": "data_subject_erasure",
  "workspace_id": "wsp_4Kd8sPm2Qx7L",
  "resources": [
    { "object": "sourced_profile", "id": "cnd_8Fj3kLm2Qd7s", "workspace_id": "wsp_4Kd8sPm2Qx7L" }
  ],
  "action_required": "cease_processing_and_delete_your_copy",
  "deadline_at": "2026-09-14T14:02:11.408Z",
  "destruction_pending": true,
  "destruction_reason": "retention_floor",
  "at": "2026-09-07T14:02:11.408Z",
  "subject_identified": false
}

def honor_erasure(store, notice):
    """Delete our copy and record that we did, within the 7-day window."""
    for resource in notice["resources"]:
        store.purge(resource["object"], resource["id"])
        # A tombstone that keeps the person OUT: a later sync must not bring
        # them back the next time they appear in a list. Store the handle
        # and nothing else about them.
        store.suppress_forever(resource["object"], resource["id"])

    store.audit(
        "erased",
        notice_id=notice["id"],
        reason=notice["reason"],
        deadline_at=notice["deadline_at"],
    )


def on_data_subject_event(store, event):
    # data_subject.suppression_applied and data_subject.erasure_completed
    # carry the same notice as GET /erasures, in data.object.
    honor_erasure(store, event["data"]["object"])

def catch_up(session, store):
    # Erasures first. Reading lists and the feed may write rows, so the list
    # of suppressed handles must be current BEFORE anything is written, or
    # you bring back someone who asked to be removed.
    consume_erasures(session, store)
    drain(store)