Code Erase Tool

Purpose: The tool securely erases code and sensitive files on Windows, intended for developers, IT admins, security teams, and compliance officers who must decommission software assets or sanitize project artifacts. It supports configurable, multi-pass overwriting, verification, and an auditable log trail to prove data sanitization. Use cases include erasing legacy source trees, build artifacts, or sensitive binaries before disposal or repurposing of systems.
Core Logic & Features: Required inputs include target_path(s), target_type (file or folder), erase_method (1-pass, 3-pass, 7-pass, Gutmann-like), passes (integer), verify (boolean). Optional/advanced features include dry_run, bulk queue, parallel processing, and export of logs. Behavior is recursive: process items, overwrite bytes with data for the selected passes, then delete items and record outcomes. The tool handles read-only attributes and can adjust permissions; admin privileges may be required for certain paths.
Inputs & Outputs: Inputs are target_path (string), target_type (enum), erase_method (enum), passes (int), verify (bool), dry_run (bool). Outputs include erased_bytes (integer), per_item_status (string), total_items (integer), and a log reference (string) for audit purposes.
Algorithms & Calculations: The core method overwrites file bytes across passes with (pseudo)random data, then deletes the item. Verification can re-read data or compute checksums to confirm sanitization. The approach aligns with common standards (e.g., DoD 5220.22-M, NIST SP 800-88) and is tailored to Windows file systems (NTFS/FAT32). Advanced options may queue items and run in parallel while preserving correct ordering for logs.
Error & Edge Cases: If a path does not exist, a file is in use, or permissions are insufficient, the item is skipped with a log entry. Large trees, long pathnames, or network shares may require elevated rights or alternative handling. The tool does not perform hardware-based disk wiping and cannot guarantee recovery prevention at the device level.
Industry/Region & Localization: Platform-specific guidance covers Windows environments and common file systems. Compliance references (NIST SP 800-88, DoD 5220.22-M) inform methods and verifiability. Outputs and logs are suitable for audit trails in regional regulatory contexts.
Assumptions & Exclusions: Assumes software-level erasure suffices for the target scope; excludes physical disk degaussing and hardware-level sanitization; not responsible for data recovery techniques beyond standard file overwrite verification; not designed for remote or network share sanitization without appropriate access.