Document the IAM U4 role policy authority design #114

Merged
weichen merged 6 commits from feature/iam-u4-role-authority into main 2026-10-18 14:20:30 +00:00
6 Commits
Author SHA1 Message Date
weichen 0b16daf14a Merge Documents main into IAM U4 role authority
governance / governance (pull_request) Successful in 17s
Why: U4 must sync main before stage 7 acceptance; main carries 21 newer commits (renderer, regulations and two-trees documents). Evidence: git merge-tree reported no conflicts; no content resolved by hand. Impact: U4 documents now sit on main 5bb4877. Refs: Dev card feature-iam-u4-role-authority
2026-10-18 14:03:41 +00:00
weichen c0611814aa Merge remote-tracking branch 'origin/main' into feature/iam-u4-role-authority 2026-10-15 06:03:14 +00:00
weichen bcdb30cc55 Plan IAM U4 acceptance and protected delivery
Why: The approved role and permission implementation needs a focused, reviewable path through browser acceptance, component delivery, and guarded closure.

Evidence: Structural audit confirms DR1-DR21, U1-U9, and KTD1-KTD6; git diff --check passes; six-lens document review findings are incorporated.

Impact: Adds the stage 7-10 plan, records the focused specification approval, and indexes the plan without authorizing production migration or deployment.

Refs: feature/iam-u4-role-authority
2026-10-15 03:53:10 +00:00
weichen e251c4bd62 Merge authoritative main before stage 7 planning
Why: base the IAM delivery plan on the current Documents main.

Evidence: fetched origin/main=87b88018b9236434b97ff6781655d625901d4090.

Impact: integrates documentation-only upstream changes before adding the U4 delivery plan.

Refs: feature/iam-u4-role-authority
2026-10-15 03:26:15 +00:00
weichen e9ce9a539e Plan the focused role and permission implementation
Why: The approved scope spans Backend authority, RDM project enforcement, and Frontend configuration and needs exact contracts and verification boundaries.

Evidence: The plan was checked against every specification section, fixed interface names, failure cases, and placeholder rules.

Impact: Implementation is limited to one effective role, system and project authorization, and the requested configuration views.

Refs: Focused role and permission system spec
2026-10-14 16:42:24 +00:00
weichen d77c6425bc Define the focused role and permission system
Why: The implementation scope must match the requested single-role position model and three permission layers without carrying unrelated IAM work.

Evidence: The spec was checked for placeholders, internal contradictions, and whitespace errors.

Impact: Backend becomes the role authority while RDM retains project permissions and document duties.

Refs: IAM role and permission system
2026-10-14 16:37:01 +00:00