Skip to content

Harden institutional contact privacy - #346

Open
moelayyan90 wants to merge 4 commits into
mainfrom
agent/contact-privacy-hardening
Open

Harden institutional contact privacy#346
moelayyan90 wants to merge 4 commits into
mainfrom
agent/contact-privacy-hardening

Conversation

@moelayyan90

Copy link
Copy Markdown
Owner

Summary

Removes persistent source-IP derivatives from XGuard's institutional contact intake. Rate limiting may use an IP transiently at the edge, but no raw IP or IP hash should be retained in the contact ledger.

  • Clears any previously stored source_ip_hash values through migration 0021
  • Stops persisting source IP hashes for new enquiries
  • Keeps anti-spam rate limiting transient
  • Updates tests to enforce the no-IP-retention boundary

This strengthens XGuard's position as child-safety infrastructure rather than a surveillance data collector.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant