# GovOPlaN IDM Codex Guide

## Scope

This repository owns identity-to-organization function assignments, governed request/grant workflows, effective dates, and external directory reconciliation.

## Documentation Contract

- Treat documentation as part of every behavior change. Update this module's manifest-driven `DocumentationTopic` contributions for affected user and administrator behavior.
- Keep feature content here; `govoplan-docs` projects it without importing IDM internals.
- Maintain a static user/admin baseline and run `/mnt/DATA/git/govoplan/tools/checks/check-manifest-shapes.py` after behavior or manifest changes.

## Boundaries

- Identity owns people; Organizations owns structures and functions; Access maps resulting facts to authority.
- Preserve effective dates, provenance, approval evidence, and reconciliation state.