ADR-004: Pseudonymous Chain Anchoring and Erasure Compatibility

Status

Accepted

Context

Touli needs immutable impact proofing without placing personal data on-chain and while honoring erasure rights.

Decision

Anchor only pseudonymous hashed ledger proofs in daily Merkle batches. Use rotating subject identifiers and destroy off-chain mapping on erasure requests.

Consequences

• Integrity proofs remain verifiable.
• Personal data remains off-chain and deletable.
• Requires strict key/mapping lifecycle controls and reconciliation jobs.