docs: define function delegation modes

This commit is contained in:
2026-08-19 22:16:18 +02:00
parent f34a6b17a9
commit d1e3b1cbfd
@@ -340,7 +340,11 @@ manifest = ModuleManifest(
"downstream routing. Deactivation retains the record and evidence but "
"removes it from active selection. Delegation and act-in-place flags only "
"describe permitted organizational semantics; Access and governed workflows "
"still decide effective authority. When configured, a recorded change-request "
"still decide effective authority. A delegable function permits a bounded "
"substitute to act as themself; act-in-place permits an explicitly selected "
"representation context that retains the real and represented accounts. Both "
"remain source-linked, time-bounded, revocable facts in IDM rather than inferred "
"group membership. When configured, a recorded change-request "
"ID is required before model mutations. Organization settings are tenant-owned "
"and do not inherit a live global hierarchy."
),