GDPR supplier erasure API

[askmy-stack]

Background

Identified during OSS audit v2 of meridian.

Problem Statement

No right-to-erasure.

Proposed Solution

DELETE /suppliers/{id}/gdpr cascade.

Acceptance Criteria

• Implementation complete
• Tests pass
• Documented in README or docs/

Files / Modules Affected

src/api/routes/compliance.py

---

Suggested labels: priority:medium, difficulty:advanced, category:security
Milestone: v3.0-platform
OSS Audit: Master Backlog v2