feat(postbox): enforce unified inbox separation

2026-08-20 04:22:29 +02:00
parent 174ee97719
commit 41ea8d8e23
16 changed files with 1029 additions and 25 deletions
@@ -56,7 +56,12 @@ materializing data.

 Users holding several functions may group selected postboxes into unified
 inbox views. These are query projections only: messages, address, read state,
-retention, and evidence remain attached to their source postboxes.
+retention, and evidence remain attached to their source postboxes. Each exact
+Postbox or template revision may allow grouping, require equal classifications,
+or remain entirely separate with an administrator-supplied explanation. The
+rule is re-evaluated on every combined query, including after assignment or
+policy changes; a View can select a personal projection through the stable
+`?grouping=<grouping-id>` route parameter without granting access.

 Hierarchy propagation is off by default. Explicit copy, attention/escalation,
 and shared-visibility rules are distinct, bounded, classification-aware, and