[Feature] Expose effective function-assignment resolution and lifecycle events for consumers #5

New Issue

zemion · 2026-07-28T18:59:04+02:00

zemion commented

2026-07-28 18:59:04 +02:00

Outcome

IDM provides the normalized, tenant-safe assignment contract needed by Postbox and other consumers to determine which identities/accounts currently hold a function in an organizational unit, including delegation and acting-for context.

Existing foundation

idm.directory already resolves active assignments for an identity/account and filters validity windows and invalid delegated sources. This issue extends that useful slice rather than introducing a second assignment model.

Acceptance criteria

Add batch account/identity resolution to avoid one query per postbox or message.
Add reverse resolution for effective incumbents of a concrete function/unit, including an explicit vacant result.
Preserve direct, delegated, acting-for, validity-window, source-assignment, and account-specific provenance in DTOs.
Emit versioned assignment-created/changed/revoked/expired events suitable for cache invalidation, Postbox access updates, and notifications.
Make effective-time evaluation testable and deterministic; reject cross-tenant references.
Distinguish organizational responsibility from application permissions. Holding a function does not itself grant generic module rights.
Do not import Postbox, Access, or Organizations implementations; use Core-owned contracts and the Organizations capability.
Tests cover multiple accounts per identity, multiple simultaneous incumbents, vacancy, delegation expiry, revocation, subunit scope, and batch queries.

Consumer

This is a P1 foundation for function-bound Postbox access and attention routing.

## Outcome IDM provides the normalized, tenant-safe assignment contract needed by Postbox and other consumers to determine which identities/accounts currently hold a function in an organizational unit, including delegation and acting-for context. ## Existing foundation `idm.directory` already resolves active assignments for an identity/account and filters validity windows and invalid delegated sources. This issue extends that useful slice rather than introducing a second assignment model. ## Acceptance criteria - Add batch account/identity resolution to avoid one query per postbox or message. - Add reverse resolution for effective incumbents of a concrete function/unit, including an explicit vacant result. - Preserve direct, delegated, acting-for, validity-window, source-assignment, and account-specific provenance in DTOs. - Emit versioned assignment-created/changed/revoked/expired events suitable for cache invalidation, Postbox access updates, and notifications. - Make effective-time evaluation testable and deterministic; reject cross-tenant references. - Distinguish organizational responsibility from application permissions. Holding a function does not itself grant generic module rights. - Do not import Postbox, Access, or Organizations implementations; use Core-owned contracts and the Organizations capability. - Tests cover multiple accounts per identity, multiple simultaneous incumbents, vacancy, delegation expiry, revocation, subunit scope, and batch queries. ## Consumer This is a P1 foundation for function-bound Postbox access and attention routing.

zemion added the

labels 2026-07-28 18:59:04 +02:00

zemion referenced this issue from GovOPlaN/govoplan-campaign

2026-07-28 18:59:05 +02:00

[Feature] Add Postbox as a governed Campaign delivery channel #81

zemion referenced this issue from GovOPlaN/govoplan-postbox

2026-07-28 18:59:06 +02:00

[Feature] Implement function-organization Postbox access through IDM, Organizations, and Core contracts #3

zemion referenced this issue from GovOPlaN/govoplan-postbox

2026-07-28 19:03:42 +02:00

[User Story] Deliver campaign messages to organizational function postboxes #16

zemion commented

2026-07-29 00:19:27 +02:00

Codex State: progress

Implemented deterministic effective-time lookup, batch identity/account resolution, reverse function incumbencies with explicit vacancy, tenant/function validation, active-function and delegated-source checks, and created/changed/revoked/expired lifecycle events. Focused IDM and composed Postbox tests pass. Automatic future-expiry emission, subunit-scope coverage, and the remaining expanded matrix stay open.

## Codex State: progress Implemented deterministic effective-time lookup, batch identity/account resolution, reverse function incumbencies with explicit vacancy, tenant/function validation, active-function and delegated-source checks, and created/changed/revoked/expired lifecycle events. Focused IDM and composed Postbox tests pass. Automatic future-expiry emission, subunit-scope coverage, and the remaining expanded matrix stay open.

zemion added

and removed

labels 2026-07-29 00:20:25 +02:00

Sign in to join this conversation.