docs: declare institutional architecture boundary

src/govoplan_idm/backend/manifest.py

@@ -39,6 +39,7 @@ from govoplan_core.core.modules import (
     PermissionDefinition,
     RoleTemplate,
 )
+from govoplan_core.core.provider_governance import declared_module_architecture
 from govoplan_core.db.base import Base
 from govoplan_idm.backend.db import models as idm_models  # noqa: F401 - populate metadata
 from govoplan_idm.backend.workflow_definitions import (
@@ -314,6 +315,19 @@ manifest = ModuleManifest(
             order=28,
         ),
     ),
+    architecture=declared_module_architecture(
+        layer="institutional_foundation",
+        kind="foundation",
+        maturity="vertical_slice",
+        documentation_ref="docs/FUNCTION_ASSIGNMENT_WORKFLOWS.md",
+        test_ref="tests/test_assignment_workflow.py",
+        known_limits=("External directory provisioning and all authority-specific grant workflows are not reference-ready.",),
+        owned_concepts=("function assignment", "assignment delegation", "acting-for assignment", "assignment request"),
+        non_owned_concepts=("identity", "organization function", "application role", "workflow runtime"),
+        recovery_docs=("docs/FUNCTION_ASSIGNMENT_WORKFLOWS.md",),
+        security_docs=("docs/FUNCTION_ASSIGNMENT_WORKFLOWS.md",),
+        operations_docs=("README.md",),
+    ),
 )