Purpose: planning guard proposal

Review the independently proposed patch below, including its unchanged callers. Work in the real product frontend and the transactional backend. Only active, unrevoked consents may cover a purpose. Minors need both explicit UI approval and authoritative workspace guardian approval. Enforce every retention ceiling. Charge ceiling 30-day blocks and count distinct confirmed purposes, even across repeated grants. The board-to-API adapter and an authoritative planning guard both contain defects. The browser workflow and direct API checks must agree on the same contract. Run bash test/run.sh. The public checks drive Chromium against native HTTP and a real database; each scoring group includes regression safeguards.

Review focus: full-stack-product

src/backend/domain/planning.cjs

BeforeProposed

+4−1

33const { usage, sumRates, exposure, naiveExposure } = require('./helpers.cjs');

44module.exports = function (state, draft, items) {

55 if (items.some((r) => r.details.age < 16))

6 requireValue(draft.flag, 'guardian-required');

6 requireValue(

7 draft.flag && state.policy.guardianApproved,

8 'guardian-required',

9 );

710 requireValue(

811 items.every((r) => draft.end - draft.start <= r.details.maxDays),

912 'retention-limit',

Your review

0 / 10,000 characters · A verdict needs supporting evidence.

30 more characters to give a verdict