Status. Proposed design only. Nothing in this vault is DG client approval. No application, service or test has been executed; every scenario is Not executed. Fees and dates are open.
T26 · Role downgrade and assignment removal use live policy
| Field | Value |
|---|---|
| Status | Not executed |
| Type | Balanced software |
| Layer / kind | API · worker · E2E |
| Priority | P0 |
| Gates | A04, A06 |
| Build step | Step-02-Identity-Membership-Roles |
| Decisions | Q02, Q07 |
Given
An active B contributor has message access via assignment; an approver can accept.
When
Remove assignment without removing company membership; downgrade approver to viewer; replay old commands.
Then / oracle
Assignment-only access disappears unless another explicit entitlement remains. Viewer mutation is rejected. Queued notification recipients are recalculated/suppressed under current policy; no blind forwarding to an ineligible user.
Evidence required
Access-source checks; role version; recipient eligibility evidence; unchanged private records on denial.
Decision dependency (verbatim)
Q02/Q07: recipient choice when no responsible user is eligible.
Source: TDD rev 1.3 (PDF); machine-readable in 10-Sources/tdd-bundle/. Back to Scenario-Index · Traceability-Matrix · integration dependencies in Dependency-and-Regression-Table.