fred 3538d33106 docs: RBAC grant model contract (S2 contract 2) ...

Defines the hierarchy grant vocabulary (viewer|member|owner, totally
ordered), evaluation semantics (deny-by-default, down-the-chain, max rule,
live fail-closed evaluation), grant management (owner-managed, no
self-escalation, explicit bootstrap of authority), transfer authority
(both-sides owner, completing contract 1 §4.2), and revocation propagation
with the same 30s/next-message bound as identity §7.1.

Embedded decision for ratification: platform admin confers no implicit
tenant access (§1.1).

Sources: PRD Part I §4, native-kanban SOT Amendment A1 §8.1.3/§8.3,
hierarchy-schema contract (PR #1435), identity-lifecycle contract §1.4
(PR #1433).

2026-08-26 18:23:23 -05:00

..

native-kanban-sot.md

docs/prd: address independent review findings 1-10 (fidelity, A1 record class + carve-out, roadmap completeness)

2026-08-25 23:20:40 -05:00

rbac-grant-model.md

docs: RBAC grant model contract (S2 contract 2)

2026-08-26 18:23:23 -05:00