[ashishsinghbora]

Summary

Implements comprehensive privacy-by-default safeguards, student self-service GDPR data controls (portability export and permanent erasure), strict contributor progression metric verification, and professional open-source governance policies.

Changes

• Privacy by Default (src/lib/db/schema.ts, drizzle/0006_privacy_and_governance.sql):
  • Changed default user profile state from public to private (is_public = false).
  • Added public_consent_given_at timestamp column to track explicit user opt-in.
  • People directory (/people) and public passports strictly filter out private accounts.
• Student Data Rights (GDPR Data Portability & Erasure):
  • Added GET /api/user/export: returns full JSON archive of all personal records, contributions, claims, and badges with attachment header.
  • Added POST /api/user/delete: self-service permanent account erasure with cascade and audit logging.
  • Enhanced SettingsForm.tsx with explicit consent description, data export button, and delete account action.
• Progression & Metric Integrity (src/lib/metrics/contributor-metrics.ts, src/lib/passport/index.ts):
  • Completed issue claims must be associated with verified, official TechNexusOrg projects before awarding progression credit.
  • Public Contributor Passports strictly exclude contributions from unapproved projects.
• Community Governance Documentation:
  • PRIVACY.md: Transparent privacy policy covering OAuth scopes, data usage, GDPR rights, and legal review notice.
  • CODE_OF_CONDUCT.md: Contributor Covenant adapted for student engineering community standards and clear enforcement guidelines.
  • .github/ISSUE_TEMPLATE/: Added standardized bug_report.md, feature_request.md, and confidential security_report.md.
  • .github/pull_request_template.md: Standardized PR template with verification checklist.
• Automated Tests:
  • Added src/lib/privacy.test.ts testing privacy defaults, consent timestamps, and metric integrity.

Architecture

Separates private user records from public passport projections. Enforces consent gates at the query layer and ensures only verified, official contributions count toward progression.

Security & Privacy Considerations

• Eliminates non-consensual indexing of student profiles.
• Provides immediate erasure capabilities for compliance with modern privacy standards.
• Prevents progression manipulation through claims on unapproved repositories.

Database Migrations

• Migration file: drizzle/0006_privacy_and_governance.sql
• Rollback: ALTER TABLE users ALTER COLUMN is_public SET DEFAULT true; ALTER TABLE users DROP COLUMN public_consent_given_at;

Testing

• npm run lint: passed with 0 errors.
• npm run typecheck: passed with 0 errors.
• npm test: 83 passed across 19 test files.
• npm run build: 21 routes built successfully.

Related Issues

Fixes #13

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota.

An organization owner can choose the repository organization as the billing source for reviews requested by members with a paid Copilot license. Learn about Copilot code review billing.