docs(adr): spaces membership — app-owned default, IdP-write optional (#212) #219
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "docs-adr-spaces"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Records the spaces/membership architecture decision (Option C) as
docs/adr/0001-spaces-membership.md, closing #212.Captures: the current IdP-write coupling and why it doesn't generalise, the three options with a security/trust comparison, the chosen app-owned model (membership in the encrypted state-backend; IdP groups read-only; IdP-write demoted to an optional documented power mode), the industry grounding (Nextcloud, Google/SharePoint, Keycloak's read-vs-write privilege line), consequences, and the #211 rollout order.
Docs only. The
ARCHITECTURE.mdcross-link rides with the handbook pass (#218).