@absolutejs/voice 0.0.22-beta.206 → 0.0.22-beta.207

package/README.md

@@ -1744,6 +1744,91 @@ Mounted routes:
 
 `createVoiceZeroRetentionPolicy(...)` intentionally defaults to `dryRun: true`; callers must explicitly apply the generated policy after reviewing the deletion proof. This gives compliance-sensitive deployments a concrete zero-retention recipe without making accidental deletion easy.
 
+### Compliance Recipes
+
+These are recipes, not compliance certifications. AbsoluteJS Voice gives you the self-hosted controls and proof surfaces; your legal/security team still owns the actual HIPAA, SOC 2, GDPR, or customer-contract process.
+
+Zero-retention sensitive call:
+
+```ts
+const policy = createVoiceZeroRetentionPolicy({
+	...runtimeStorage,
+	audit: runtimeStorage.audit,
+	auditDeliveries: runtimeStorage.auditDeliveries,
+	traceDeliveries: runtimeStorage.traceDeliveries
+});
+
+const dryRun = await buildVoiceDataRetentionPlan(policy);
+if (dryRun.deletedCount > 0) {
+	await applyVoiceDataRetentionPolicy({
+		...policy,
+		dryRun: false
+	});
+}
+```
+
+This removes sessions, traces, reviews, tasks, integration events, campaigns, incident bundles, and delivery queues that match the policy selectors. The generated policy starts as a dry run so a zero-retention mode cannot accidentally wipe data without explicit application.
+
+Redacted support export:
+
+```ts
+const auditExport = await exportVoiceAuditTrail({
+	redact: voiceComplianceRedactionDefaults,
+	store: runtimeStorage.audit
+});
+const auditMarkdown = renderVoiceAuditMarkdown(auditExport.events);
+
+const traceMarkdown = renderVoiceTraceMarkdown(events, {
+	redact: voiceComplianceRedactionDefaults
+});
+```
+
+Use this for support tickets, customer escalations, incident reviews, or vendor handoffs where transcripts, tool payloads, provider metadata, or audit events may contain personal data.
+
+Customer-owned storage:
+
+```ts
+const runtimeStorage = createVoicePostgresRuntimeStorage({
+	connectionString: process.env.DATABASE_URL!,
+	schemaName: 'voice_ops',
+	tablePrefix: 'support'
+});
+
+app.use(
+	createVoiceDataControlRoutes({
+		...runtimeStorage,
+		audit: runtimeStorage.audit,
+		auditDeliveries: runtimeStorage.auditDeliveries,
+		redact: voiceComplianceRedactionDefaults,
+		traceDeliveries: runtimeStorage.traceDeliveries
+	})
+);
+```
+
+Use file storage for local demos, SQLite for small self-hosted installs, Postgres for production app-owned records, and S3 delivery for exported audit/trace evidence. The important point is that sessions, traces, reviews, tasks, campaigns, audit, and delivery queues remain in infrastructure the app owner controls.
+
+Deploy gate for compliance evidence:
+
+```ts
+app.use(
+	createVoiceProductionReadinessRoutes({
+		audit: {
+			require: [
+				{ type: 'provider.call' },
+				{ type: 'operator.action' },
+				{ type: 'retention.policy', maxAgeMs: 7 * 24 * 60 * 60 * 1000 }
+			],
+			store: runtimeStorage.audit
+		},
+		auditDeliveries: runtimeStorage.auditDeliveries,
+		traceDeliveries: runtimeStorage.traceDeliveries,
+		store: runtimeStorage.traces
+	})
+);
+```
+
+This makes provider-call audit evidence, operator interventions, recent retention-policy proof, and export-queue health part of release readiness instead of a manual dashboard check.
+
 Use `createVoiceAuditLogger(...)` when you need append-only compliance evidence outside call traces. The logger records provider calls, tool calls, handoffs, retention runs, and operator actions into `runtimeStorage.audit`, so self-hosted teams can prove who changed what, which provider ran, which tool fired, and what data-control policy deleted.
 
 Pass `audit` directly to `createVoiceAgent(...)` to record model calls as provider-call audit events and tool executions as tool-call audit events. Pass it to `createVoiceAgentSquad(...)` to record squad handoffs automatically. Use `auditProvider` and `auditModel` on agents when you want readiness and compliance reports to show the actual model provider instead of the agent id.

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@absolutejs/voice",
-	"version": "0.0.22-beta.206",
+	"version": "0.0.22-beta.207",
 	"description": "Voice primitives and Elysia plugin for AbsoluteJS",
 	"repository": {
 		"type": "git",