Abstract
This document discloses, enablingly and with dated priority, a database-layer mechanism that reconciles two requirements normally in direct tension: the data subject's right to erasure (GDPR Article 17; the COPPA parental deletion right for children's data) and the integrity of a trigger-enforced append-only audit ledger whose rows must never be updated or deleted. The mechanism performs, in one database transaction for one subject: (1) a crypto-shred of a per-subject key row — the key material is set to NULL while a keyref tombstone survives; (2) a manifest-driven purge of every plaintext PII surface, capturing each surface's row count before the UPDATE so a pointer-only surface is counted correctly; and (3) the append of a single immutable erasure-fact row recording who/what/when/scope but never the PII itself. The append-only decision ledger is never touched: because its rows reference the now-destroyed key, they become de-identified structurally, with no UPDATE and no DELETE. A queryable self-audit predicate returns keyDestroyed === true AND orphanPii === 0 AND factPreserved === true as a machine-verifiable completeness proof. The erasure module is structurally isolated from the ledger's single-writer gate — it never references the gate state column, never imports the gate writer, and never mints the transaction marker the gate requires — and a static scanner enforces that isolation. The publication makes this composition, and the proof predicate, public prior art.
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.
Recommended Citation
Assuncao, gustavo matthew, "Atomic Crypto-Shred with Trigger-Immutable Audit-Ledger Preservation and Machine-Verifiable Zero-Orphan-PII Proof", Technical Disclosure Commons, (July 13, 2026)
https://www.tdcommons.org/dpubs_series/10873