fred f507b2bc79 docs: identity lifecycle contract rev 2 — address independent review findings 1-9 ...

- §3: durable fail-closed epoch + writer-level refusal + atomic transition
  (adapter must be transaction-bound or bootstrap writes users itself);
  first-admin SSO defined as the bootstrap writer, not JIT
- §5: canonical account email split from per-principal provider claims;
  explicit email-change workflow only
- §6: external principal keyed by issuer+subject, DB-unique, immutable
  provider->issuer binding; explicit link requires step-up reauth
- §2/§4: JIT per-provider default off always, wizard-explicit enable;
  effective closed during epoch; allowlist requires verified email
- §7.1: measurable deactivation (atomic-or-fail-closed ban+revocation,
  all transports, 30s/next-message socket bound, admin tokens)
- §7.3: deletion gated here; hard-delete endpoint fails closed until a
  chartered deletion/retention contract ratifies (contract 7 is D14 custody)
- §1.4: account creates no workspace membership/authority (SOT REQ-TEN-001)
- §8: expanded verification matrix with bounded observables
- factual fixes: 21 FK constraints across 19 tables; ci-postgres is the
  postgres service of the test step

2026-08-26 18:05:31 -05:00

..

identity-lifecycle.md

docs: identity lifecycle contract rev 2 — address independent review findings 1-9

2026-08-26 18:05:31 -05:00

native-kanban-sot.md

docs/prd: address independent review findings 1-10 (fidelity, A1 record class + carve-out, roadmap completeness)

2026-08-25 23:20:40 -05:00