mirror of
https://github.com/microsoft/BCQuality.git
synced 2026-10-05 14:46:55 +01:00
02e7ab15b0
Some checks are pending
Validate knowledge index / validate-index (push) Waiting to run
Validate AL review fixtures / validate-review-fixtures (push) Waiting to run
Validate skill index and report schemas / validate-contract (push) Waiting to run
Validate frontmatter and structure / validate (push) Waiting to run
* Add retention policy knowledge to the privacy domain Two articles covering retention policies for extension-owned tables, the gap that lets high-volume log tables grow unbounded: - register-owned-log-tables-for-retention-policies: an extension's own log tables must be added to the allowed-tables list from install AND upgrade code, guarded by IsAllowedTable plus an upgrade tag, with a mandatory minimum retention where audit needs one. - ship-a-default-retention-policy-setup: registration only makes a table selectable; nothing is deleted until a Retention Policy Setup record exists, so ship one (disabled by default) as the platform's own Retention Policy Installer does. Each ships good/bad AL samples. Claims verified against the BC admin docs and the Retention Policy module in microsoft/BCApps. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011gvTjm746MtJEVWeRTbG46 * Address review feedback on retention policy knowledge - Scope both articles to bc-version [17..] (retention policies shipped in v17). - Allowed-tables sample: add OnRefreshAllowedTables subscriber with a ForceUpdate path; the upgrade tag now gates one-time setup only. - Default-policy sample: use Retention Policy Setup.FindOrCreateRetentionPeriod instead of a hand-rolled lookup-then-insert that can collide on code. - Anti-pattern now keys on append-only tables rather than table names. - al-privacy-review: add retention-policy tokens and deterministic routing for both articles, with a bounded per-table text search for delete and registration paths. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Address second review round on retention policy knowledge - Scope both articles to bc-version [22..]: FindOrCreateRetentionPeriod first appears in the 21.1 System Application and OnRefreshAllowedTables in 22. - Reframe the default-setup article as optional guidance; registration without a setup is valid. The anti-pattern and review routing now cover only false claims that registration alone cleans up data. - Make all four samples self-contained: declare Contoso Activity Log in each, add the Retention Policy Setup permission, and guard the default setup on IsAllowedTable. - Let evaluation overrides list additionalArticles and register both retention pairs as extra privacy cases (38 cases, existing IDs unchanged). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Revert evaluation harness change for multiple articles per domain The harness intentionally evaluates one paired article per domain. Keep it as designed; how the retention pairs join privacy evaluation is left to the maintainers. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Register retention policy pairs in the privacy evaluation override Use main's articles override so both retention article pairs get positive and clean cases alongside no-pii-in-telemetry-message-string. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Jeremy Vyska <jeremy@sparebrained.com> Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| avoid-strsubstno-prebuild-before-error.bad.al | ||
| avoid-strsubstno-prebuild-before-error.good.al | ||
| avoid-strsubstno-prebuild-before-error.md | ||
| data-classification-is-table-field-property.md | ||
| data-classification-required-on-pii-fields.bad.al | ||
| data-classification-required-on-pii-fields.good.al | ||
| data-classification-required-on-pii-fields.md | ||
| error-vs-message-telemetry-logging.md | ||
| errorinfo-telemetry-classification-and-errortype.bad.al | ||
| errorinfo-telemetry-classification-and-errortype.good.al | ||
| errorinfo-telemetry-classification-and-errortype.md | ||
| featuretelemetry-customdimensions-no-pii.bad.al | ||
| featuretelemetry-customdimensions-no-pii.good.al | ||
| featuretelemetry-customdimensions-no-pii.md | ||
| featuretelemetry-logerror-implicit-errortext.bad.al | ||
| featuretelemetry-logerror-implicit-errortext.good.al | ||
| featuretelemetry-logerror-implicit-errortext.md | ||
| flowfield-flowfilter-classification-systemmetadata.good.al | ||
| flowfield-flowfilter-classification-systemmetadata.md | ||
| getlasterrortext-customer-content-in-errors.bad.al | ||
| getlasterrortext-customer-content-in-errors.good.al | ||
| getlasterrortext-customer-content-in-errors.md | ||
| in-memory-data-not-a-privacy-concern.md | ||
| migration-destination-classification.md | ||
| no-pii-in-telemetry-message-string.bad.al | ||
| no-pii-in-telemetry-message-string.good.al | ||
| no-pii-in-telemetry-message-string.md | ||
| page-display-is-not-a-privacy-concern.md | ||
| privacy-notice-consent-for-external-data-transfer.bad.al | ||
| privacy-notice-consent-for-external-data-transfer.good.al | ||
| privacy-notice-consent-for-external-data-transfer.md | ||
| register-integration-in-privacy-notice-registrations.good.al | ||
| register-integration-in-privacy-notice-registrations.md | ||
| register-owned-log-tables-for-retention-policies.bad.al | ||
| register-owned-log-tables-for-retention-policies.good.al | ||
| register-owned-log-tables-for-retention-policies.md | ||
| resolve-tobeclassified-before-release.md | ||
| session-logmessage-requires-dataclassification.bad.al | ||
| session-logmessage-requires-dataclassification.good.al | ||
| session-logmessage-requires-dataclassification.md | ||
| ship-a-default-retention-policy-setup.bad.al | ||
| ship-a-default-retention-policy-setup.good.al | ||
| ship-a-default-retention-policy-setup.md | ||
| table-level-data-classification-cascades.good.al | ||
| table-level-data-classification-cascades.md | ||