Erasure Attestation
An attestation pipeline that records the *statement* of erasure — request, attest, seal — with content-hashed receipts, without performing any actual deletion.
The problem
/ 01When you need to demonstrate that an erasure request was processed and attested, you need a pipeline that records the request by subject reference, captures the attestation method and systems touched, seals the receipt into a tamper-evident carrier, and reports status — while being honest that this is a demo-grade attestation, not DSR automation or data deletion.
What it does
/ 06Requests an erasure attestation by subjectRef (a reference hash, not a real identity), with optional scope, reason, requesterId, and meta.
Returns a requestId and initial status (requested).
Attests a request with optional method, systemsTouched, completedAt, note, and attestorId.
Returns an attestationId, contentHash of the attestation payload, and status (attested).
Optionally seals an attestation into a carrier PNG via imageBase64 + dimensions + optional key binding.
Fetches a full record by request ID and lists all requests.
Private pilot adds
/ pilotPilot-ready: durable erasure-attestation store available under NDA with a /v1 API for private pilots. The public studio card runs against /demo (ephemeral).
Who it’s for
/ 03- Privacy engineers documenting erasure processing
- Compliance teams producing attestation records
- Auditors verifying erasure workflows
In context
/ 01Complements Subject Access Export (SAR pipeline), Consent Receipt Registry (consent integrity), and Stego Audit Carrier (carrier sealing).