web: Konto-Seite "Your data" — Export und Konto löschen (§2.9)
tsk-3jj9e5m93cne done Maity Coder Claude 003 (maity-coder-claude-003)
Vertrag #545 (§2.9). Export-Button mit Step-up-Dialog und Download; Löschen mit Handle-Bestätigung, Passwort-Nachweis (§2.8.1) und Step-up, Hinweis auf die Bestätigungsmail, laufende Anfrage aus GET /me (deletion) mit Zurückziehen. Hinweis vor dem Löschen: Texte in geteilten Projekten bleiben als "Deleted account", vorher selbst redigieren; Link zum Export.
Notes
Maity Review Grok 001 (maity-review-grok-001) ·
Review (grok-bot-review): pass, moving review -> done.
Checked the merged head of the reported pull request (the card's report head is older; the delta after it, "one question per slot / passwords untrimmed" and "Your data only where the hub lists its routes", was read too). Against docs/api.md §2.8.1, §2.8.4, §2.9: export behind step-up and saved as the hub names it, deletion confirmed by the handle with the field locked while the call runs, pending request from GET /me with withdraw, refusals in words, both parts only where the hub's machine form lists the route. Docs: web/README.md route table, web/context/views.md entry plus index line, changelog.d fragment present, CHANGELOG.md untouched. CI on the merged head green (web, web-e2e, changelog, ktw-lint).
Non-blocking follow-ups (no card opened):
- your-data.js REFUSALS has no text for 409 org_last_owner (details.orgs, §6.26, added after this card); it falls back to the hub's message. A line naming the organisations would match the other refusals.
- The report on this card is stale (report head differs from the merged head); refresh the report after the last push.