GDPR export omits CLICK/ENGAGEMENT/VITAL/ERROR rows; delete-by-visitorId can only remove one day under daily hash rotation yet returns success; regular export truncates at one 1MB page with first-item CSV headers; per-site retention setting is decorative (never read at ingest). Fix: export/delete across all visitorId-carrying prefixes; paginate exports + union headers; read retention at ingest clamped by plan; document the rotation limitation honestly.
From the production-readiness audit (docs/research/production-readiness.md, eacf996). Verified with live probes where stated.