Add enterprise retention legal hold controls

[vinaykrsinghal-stage]

@algora-pbc /claim #19

Summary

• add a self-contained enterprise retention and legal hold governance module for institutional research operations
• evaluate synthetic records against retention policies, active legal holds, open-access evidence requirements, and controlled-data export review rules
• generate purge queues, export locks, dashboard metrics, deterministic webhook event digests, and an audit-ready export manifest
• include synthetic data, dependency-free tests, requirement mapping, an SVG preview, and a short H.264 MP4 demo artifact

Why this slice is distinct

This focuses on retention windows and legal holds before research records are purged or exported. It avoids duplicating existing #19 submissions around broad dashboards, export packages, compliance evidence packets, trust centers, webhook replay ledgers, audit signal routing, and identity provisioning drift.

Demo

• enterprise-retention-legal-hold/docs/demo.mp4
• https://github.com/vinaykrsinghal-stage/SCIBASE.AI/blob/codex/enterprise-retention-legal-hold-19/enterprise-retention-legal-hold/docs/demo.mp4
• cd enterprise-retention-legal-hold && npm run demo

Verification

cd enterprise-retention-legal-hold
npm run check
npm test
npm run demo
ffprobe -v error -select_streams v:0 -show_entries stream=codec_name,width,height,duration -of default=noprint_wrappers=1 docs/demo.mp4
cd ..
git diff --check
rg -n "api[_-]?key|private[_-]?key|password|secret|token|wallet|ssn" enterprise-retention-legal-hold

Local results:

enterprise-retention-legal-hold tests passed
Status: legal_hold_controls_required
Actions: 7
Export locks: 2
codec_name=h264
width=1280
height=720
duration=7.000000
git diff --check passed
secret pattern scan returned no matches

AI-assisted with OpenAI Codex; I reviewed and locally verified the implementation before submission.