👻 GhostTrace — The Data That Refused to Die

Dinesh Bhardwaj — Sat, 31 Oct 2026 21:15:38 +0000

My submission for Hacktoberfest Open-Source AI Challenge Week 4: Ghost in the Machine.

What I Built

Have you ever wondered what happens to your personal data after you click Delete Account?

The application says your account has been deleted. You receive a confirmation email. Everything looks fine.

But what about the copies sitting in backup archives, analytics databases, search indexes, support attachments, application logs, or third-party integrations?

That's where GhostTrace comes in.

GhostTrace is an evidence-first data deletion investigation agent that helps uncover digital traces left behind after a deletion request.

It investigates whether personal data associated with a deletion request still exists across different systems. It connects historical identities, examines available evidence, applies deletion policies, and identifies records that may require further action.

Its investigation is divided into three stages:

Finding: Discover remaining records, exposed personal information, active data flows, and restoration risks.
Remediation: Recommend appropriate actions such as deletion, redaction, anonymization, disabling data flows, or blocking restoration.
Verification: Define the checks needed to confirm that the required actions have actually been completed.

Each case receives a final status: COMPLETE, INCOMPLETE, or NOT_APPLICABLE, along with a structured audit trail.

The important part is that GhostTrace does not blindly trust a deletion confirmation. It looks for evidence.

It also does not directly delete production data. Its purpose is to investigate, report, and recommend actions.

Demo

🎥 Watch the GhostTrace Demo

Code

The complete source code, datasets, supporting evidence, custom evaluation cases, and documentation are available on GitHub.

🔗 Explore GhostTrace on GitHub

Feel free to explore the implementation and try it with the provided datasets.

How I Built It

I built GhostTrace using Python, with a focus on deterministic processing and evidence-based investigation.

The system processes deletion requests and historical identity information, then examines supporting evidence from different sources.

It supports evidence formats such as JSON, SQL, logs, text files, PDFs, and images where the required extraction tools are available.

The investigation engine identifies relevant records, interprets their states, applies the supplied deletion rules, and generates structured findings and recommended next steps.

I also added custom evaluation cases to test the system beyond the basic sample dataset.

One of my main design decisions was to keep evidence and verification separate from generated recommendations. A proposed remediation action should never be presented as proof that the action has already happened.

This makes the output more transparent and easier to audit.

Why Does Open Innovation Matter?

Privacy and data deletion are not problems that belong to a single company.

Every organization has a different infrastructure, different databases, and different ways of storing information. A closed solution may work for one environment but might not be suitable for another.

Open innovation allows developers to inspect the implementation, understand the decision-making process, adapt the system, and contribute improvements.

For a project like GhostTrace, transparency matters because we are dealing with personal data and accountability.

Developers should be able to understand why a record was flagged, which evidence supports a finding, and what still needs to be verified.

I also believe open-source development creates opportunities to experiment with different AI models and approaches without being locked into a single provider.

The Spirit of It

The interesting thing about deleted data is that it doesn't always disappear.

A record can vanish from one database and still survive in another system that nobody remembered to check.

A backup gets restored. An old integration becomes active again. A forgotten export continues to contain personal information.

That's the ghost.

I built GhostTrace around one simple question:

What if we could trace the data that was supposed to be gone?

Built with curiosity for Hacktoberfest 2026. 👻

I'd love to hear your feedback, suggestions, and ideas for making GhostTrace better!