Durable per-user usage rollup and GDPR/PIPL content erasure#5

Merged

CMGS merged 9 commits into

mainfrom

feat/usage-rollup-erasure

Jul 16, 2026

Commits on Jul 16, 2026

feat(usage): durable minute rollup so per-user cost survives ledger pruning
CMGS
committed
feat(retention): erase a user's retained content on request (GDPR/PIPL)
CMGS
committed
test: exercise rollup and erasure against real Postgres
CMGS
committed
fix(review): close rollup correctness and erasure-reach findings
CMGS
committed
fix(review): settle minute, active-item erasure, atomic file delete, tx pruning
CMGS
committed
fix(review): pre-dispatch item snapshot and negative-price rejection
CMGS
committed
fix(review): fail-closed dispatch snapshot; erasure markers stop local mid-batch items
CMGS
committed
fix(review): erasure baseline at item capture; bounded erasure markers
CMGS
committed
fix(review): close post-PR findings — prune-vs-rollup loss, erasure identity, CI isolation
CMGS
committed