This repository was archived by the owner on Aug 12, 2026. It is now read-only.

feat: account deletion (barrier, teardown, tombstones) + subscription reclaim - #374

Open

lourou wants to merge 50 commits into

otr-devfrom

feature/delete-account-impl

Commits on Jul 13, 2026

Commits on Jul 15, 2026

feat(deletion): add barrier, deletion-record, outbox, and tombstone models
lourou
committed
ac86f51
feat(deletion): barrier at token mint, fail-closed requireAccount, live-account fencing
lourou
committed
4f0fffb
feat(deletion): honor subscription tombstones in verify and store webhooks
lourou
committed
f791707
feat(deletion): DELETE /v2/accounts/me with single-transaction teardown
lourou
committed
e9f01f4
feat(deletion): outbox drain worker and external purge executors
lourou
committed
9e505d1
feat(claim): subscription lineage, custody escrow, and the claim endpoint
lourou
committed
ff1c55f
test(deletion): adversarial invariants, schema guards, and spec amendments
lourou
committed
e56591a
fix(db): make reclaim migrations additive and database-enforce money invariants
lourou
committed
ce9179b
fix(subscriptions): order-identity Google accounting, atomic lineage resolution, lock-safe custody moves
lourou
committed
c2e8cec
fix(deletion): co-serialize barrier with mint, fence every account route, default deletion off
lourou
committed
d6db53a
fix(claim): fail-closed attestation flag, real pending-transfer push, shared-store global limiter
lourou
committed
9a364bc
test(deletion): round-3 adversarial invariants, router fencing audit, replay-flake diagnostics
lourou
committed
f725250
fix(claim): exact funding-event restoration, keyless claim fail-close, Google provider gate
lourou
committed
3727d99
fix(subscriptions): atomic tombstone rotation absorption, fail-closed void fallback
lourou
committed
2bc0935
fix(auth): lossless activity veto, exact delete-replay carve-out, fail-closed global ceiling
lourou
committed
2ce3974
feat(subscriptions): reclaim reconciliation sweep (quarantine drain + post-transfer drift)
lourou
committed
5ee7214
test(deletion): round-4 invariants — exact-key restoration, veto race, parked voids, ceiling, sweep
lourou
committed
2e028a3
fix(auth): fail closed when the activity stamp cannot be written
lourou
committed
3464e24
feat(subscriptions): durable reconciliation progress state
lourou
committed
c673617
fix(claim): fail closed when restoration finds no funding-event custody
lourou
committed
296142e
feat(subscriptions): rework reconciliation sweep - retry state, drift cursor, version fence, lease
lourou
committed
90a316c
test(deletion): round-5 invariants - veto fail-close, drift cursor, fence, lease, void e2e
lourou
committed
98f4de5
fix(reconciliation): composite drift cursor, DB-owned commit time, rolling-safe migration
lourou
committed
e415a82
test(deletion): cover drift cursor boundaries and mint-stamp failure
lourou
committed
53e389e
fix(reconciliation): durable per-lineage drift scheduling, rolling-safe migration order
lourou
committed
a302528
test(deletion): cover drift scheduling fairness, escalation, and backlog bounds
lourou
committed
6f3b657
fix(reconciliation): final provider check at drift deadline and bounded backlog drain
lourou
committed
4c4ab71
fix(migrations): normalize all committed transfer timestamps and freeze committedAt to DB time
lourou
committed
4c343ab

Commits on Jul 16, 2026

Commits on Jul 23, 2026

feat(deletion): gate the endpoint by ACCOUNT_DELETION_ENABLED env var
lourou
committed
d6918d4

Uh oh!

Commits

Commits on Jul 13, 2026

Commits on Jul 15, 2026

Commits on Jul 16, 2026

Commits on Jul 23, 2026

Commits on Jul 24, 2026

Commits on Aug 4, 2026