docs: contract 2 Amendment 1 — company-CRUD capability (S2 follow-up) #1477

Merged

fred merged 3 commits from docs/c2-amendment1-company-crud into next 2026-08-29 19:34:49 +00:00

Conversation 0 Commits 3 Files Changed 2

+263

3 Commits

Author	SHA1	Message	Date
fred	6550bda5e1	docs: Amendment 1 rev 3 — terra round-2 fixes ... - user FKs text not uuid (users.id is BetterAuth text; matches hierarchy_grants shape) - actor receipt split from canonical audit event: receipt carries {target id, old, new}; canonical event keeps hierarchy schema §5.2's full immutable snapshot; no audit read conferred; §8.6.3 witnesses both sides - kanban SOT Amendment A3 (§10) expressly extends A2's sole-disclosure rule by exactly the capability-holder carve-out; ruling request names it	2026-08-29 14:04:12 -05:00
fred	99a0c89c5a	docs: Amendment 1 rev 2 — terra round-1 fixes ... Existence disclosure stated as a bounded carve-out to hierarchy schema §6.7/§2.8 instead of denied (§8.1); platform_capabilities fully pinned (uuid PK, timestamptz, both user FKs ON DELETE RESTRICT mirroring contract 1 §3.3, column-set exhaustiveness) (§8.2); assignment rides the normal admin command surface, sole writer (§8.3); disjunct-independent fail-closed evaluation and capability deletion added to §6.1's revocation enumeration (§8.4); §8.6 rewritten as a capability-only command matrix with disclosure-bound, both-polarity assignment, and per-transport revocation witnesses.	2026-08-29 13:49:47 -05:00
fred	009a0ef18e	docs: contract 2 Amendment 1 — company-CRUD capability definition ... Defines the capability class hierarchy schema §5.5 / contract 1 Amendment 1 anticipates: a platform-scoped, admin-assigned, audited delegation of exactly the company visibility command. No read surface, no other company operation; §2 vocabulary and §3 evaluation untouched. Ends in a one-sentence ruling request (S2 process).	2026-08-29 13:35:59 -05:00