6 Commits

Include renames

Author	SHA1	Message	Date
fred	501112d2a4	docs: RBAC grant model contract revision 2 (GLM review findings 1-10) ... - name the two shipped platform-admin bypass paths (command-authorization hasScope short-circuit, MCP tenant-admin scope derivation) as non-conformant; 7.4 retires them explicitly - suspend team grant subjects pending a team contract; command surface refuses team-subject grants; evaluation semantics pre-specified - no-self-escalation restated with future-decoupling rationale; observable is an audit invariant, not an unconstructible refusal test - bootstrap seeding scoped to top-level company creation; child nodes inherit via down-the-chain, resolving the 7.7/4.3 contradiction - exact A1 quote (not a bypass of workspace authorization) - subject/role audit fields attributed as this contract's addition - principal-position consequence named (1.3) with matrix cell - added observables: zero membership rows, fail-closed fault injection, no existence oracle - role-string namespacing rule (4.5) - ruling request names the PRD-admins interpretive resolution	2026-08-26 18:33:08 -05:00
fred	3538d33106	docs: RBAC grant model contract (S2 contract 2) ... Defines the hierarchy grant vocabulary (viewer|member|owner, totally ordered), evaluation semantics (deny-by-default, down-the-chain, max rule, live fail-closed evaluation), grant management (owner-managed, no self-escalation, explicit bootstrap of authority), transfer authority (both-sides owner, completing contract 1 §4.2), and revocation propagation with the same 30s/next-message bound as identity §7.1. Embedded decision for ratification: platform admin confers no implicit tenant access (§1.1). Sources: PRD Part I §4, native-kanban SOT Amendment A1 §8.1.3/§8.3, hierarchy-schema contract (PR #1435), identity-lifecycle contract §1.4 (PR #1433).	2026-08-26 18:23:23 -05:00
fred	4b448109dd	docs/prd: address independent review findings 1-10 (fidelity, A1 record class + carve-out, roadmap completeness)	2026-08-25 23:20:40 -05:00
fred	bc1149c15e	docs: north-star PRD rewrite (D1-D14), ROADMAP.md, kanban SOT Amendment A1 ... - docs/PRD.md: Part I product north star authored from ratified decisions D1-D14; Part II preserves all active workstream contracts verbatim (KBN-101, FCM #758, FCOM #766, TESS, #756, MOS-PORT, #1150, #1174, #1194, RI #1275, M1). Referenced anchors unchanged. - docs/archive/PRD-v0.1.md: v0.1.0 beta PRD body archived verbatim with supersession header. - docs/ROADMAP.md: all phases P0-P5 present from day one per D11 (P2-P5 as explicit placeholders). - docs/requirements/native-kanban-sot.md: Amendment A1 (D13) - hierarchy parentage + RBAC chain above workspaces; sections 1-7 untouched.	2026-08-25 22:23:07 -05:00
veronicaandfred	a480ee83dc	docs(W4): document contract — stamp kind and status on 104 live docs (#1350) ... Co-authored-by: veronica <[email protected]>	2026-08-21 14:07:36 +00:00
jason.woltje	49e8a54105	docs(#751): Publish native Kanban/SOT canon (#752)	2026-07-14 17:08:09 +00:00