Status. Proposed design only. Nothing in this vault is GGA client approval. The GGA client documents are supplied drafts: see GGA-Source-Digest. No application, service or test has been executed; every scenario is Not executed. Delivery fees and dates are open.
T26 · Role downgrade and assignment removal use live policy
| Field | Value |
|---|---|
| Status | Not executed |
| Type | Balanced software |
| Layer / kind | API · worker · E2E |
| Priority | P0 |
| Gates | A04, A06 |
| Build step | 03 (GGA order; the 1.3 step is history) |
| Decisions | Q02, Q07 |
Disposition under GGA
| Field | Value |
|---|---|
| Disposition | Retained and refined |
| GGA basis | Blueprint pp. 3, 7, 17 (GGA-Requirement-Register) |
| Replaced or carried by | GS05-staged, GS17-staged |
| Still open | GQ03-staged |
| What changes | Live policy on every request; eligibility is computed at request time. |
The 1.3 text below is kept verbatim as history. Where the disposition is Reframed, Superseded or Parked it is not the GGA oracle; use the replacing scenario. A Parked scenario has no GGA feedback and stays a Proposed carry-forward. The status stays Not executed. Register: Scenario-Dispositions.
Given
An active B contributor has message access via assignment; an approver can accept.
When
Remove assignment without removing company membership; downgrade approver to viewer; replay old commands.
Then / oracle
Assignment-only access disappears unless another explicit entitlement remains. Viewer mutation is rejected. Queued notification recipients are recalculated/suppressed under current policy; no blind forwarding to an ineligible user.
Evidence required
Access-source checks; role version; recipient eligibility evidence; unchanged private records on denial.
Decision dependency (verbatim)
Q02/Q07: recipient choice when no responsible user is eligible.
Source: TDD rev 1.3 (PDF); machine-readable in 10-Sources/tdd-bundle/. Back to Scenario-Index · Traceability-Matrix · integration dependencies in Dependency-and-Regression-Table.