Safe Expunging and 'legal' restrictions

[TomHennen]

I'm also not sure the scs can be on the hook for enforcing that the data removals were for legal reasons.
Generally I think "the owner of the intellectual property in the repo (the root repo owner, in gh terms) can remove data. They should only do this for legal or privacy reasons due to the risk of severe reputational consequences (damage to artifact chain of custody)." Ie: it's indistinguishable from a repo hijack so you should have a good reason.

Originally posted by @zachariahcox in #1203 (review)

[TomHennen]

That's probably right. One thing I was thinking of doing is following the build tracks example and making it clear which requirements are on the Organization (build track calls it the producer) and which are on the SCS.

I think that would resolve this?