Status. Proposed design only. Nothing in this vault is DG client approval. No application, service or test has been executed; every scenario is Not executed. Fees and dates are open.
Identity and Company Access
Purpose
Foundation, identity, membership, roles, assignment, and the policy pipeline with its isolation harness.
Source notes
Permissions-and-Confidentiality, System-Components, Step-02-Identity-Membership-Roles, Step-03-Policy-Pipeline-and-Isolation-Harness, Step-01-Foundation, Q01, Q02, Q09
Current state
Proposed. No code exists. Build steps: Step-01-Foundation, Step-02-Identity-Membership-Roles, Step-03-Policy-Pipeline-and-Isolation-Harness.
Minimal Context Set
Read these first, then only the sections the task needs:
- Permissions-and-Confidentiality
- System-Components
- Step-02-Identity-Membership-Roles
- Step-03-Policy-Pipeline-and-Isolation-Harness
- Step-01-Foundation
- Q01
- Q02
- Q09
Tables and records owned
Company, user, membership, invitation, assignment; session and audit records. Foundation work (Step 01) also owns the repository, CI, environments, migrations and the base outbox contract.
Endpoints (illustrative, see Request-Pipeline)
GET /v1/me/company; invitation, membership, recovery and assignment endpoints; GET /v1/health.
See Authentication-and-Authorization and Company-Isolation.
Scenarios (primary step in this module)
T01, T02, T03, T04, T16, T25, T26, T27, T28, T37, T38, DG22, DG25, DG26
Statuses and gates: Scenario-Inventory. All Not executed.
Open decisions
Q01, Q02, Q07, Q08, Q09, Q16, Q19. Dependent behaviour is Blocked by Qnn; see Decision-Gates.
Known limitations
None recorded beyond the vault’s own boundaries.
Change history
| Date | Change |
|---|---|
| 2026-10-20 | Created (bootstrap Phase 2) |