feat(beheer): stamdata deletion protection — CI referential gate + editor expire/warn

CI gate (authoritative): generalize the dangling-reference test in StamdataValidationTests into a declared, extensible reference list ("every declared reference into a stamdata key resolves against the currently-valid stamdata"), starting with Diploma.Opleiding → professions.program. Removing/renaming a referenced program, or expiring it while current data still references it, fails the PR build (ADR-0004). Editor (fast feedback): confirm before delete (warns a referenced row fails CI) and, for temporal tables, a "Sluiten per vandaag" action that closes validity (geldigTot) — steering to expire over hard delete. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-23 22:35:17 +02:00
parent 67802c68b4
commit fbc4bf51d0
6 changed files with 122 additions and 22 deletions
@@ -92,6 +92,7 @@ for its existing violations, so every WP ends green.
 | [WP-45](WP-45-create-ssp-generator.md)         | `create-ssp` bootstrap generator (mechanise new-ssp)                               | 8 · platform/DX/showcase    | todo   |
 | [WP-46](WP-46-vitest-coverage.md)              | Vitest coverage (report + report-only thresholds)                                  | 8 · platform/DX/showcase    | done   |
 | [WP-47](WP-47-feature-flags.md)                | Runtime feature flags (catalog-in-code, admin toggle, FE+backend)                  | 8 · platform/DX/showcase    | done   |
+| [WP-48](WP-48-stamdata-deletion-protection.md) | Stamdata deletion protection (CI referential gate + editor expire/warn)            | 8 · platform/DX/showcase    | done   |

 Sequencing dependencies (stated in the WPs too): 01 before 10–15 (axe covers story churn);
 03/04 before 05–09 (boundaries stop new violations during refactors); 06 before 07 (typed