# GovOPlaN Tenancy Codex Guide

## Scope

This repository owns tenant lifecycle, tenant administration, tenant context resolution, and tenant settings over Core's shared scope storage.

## Documentation Contract

- Treat documentation as part of every behavior change. Update this module's manifest-driven `DocumentationTopic` contributions for affected user and administrator behavior.
- Keep feature content here; `govoplan-docs` projects it without importing Tenancy internals.
- Maintain a static user/admin baseline and run `/mnt/DATA/git/govoplan/tools/checks/check-manifest-shapes.py` after behavior or manifest changes.

## Boundaries

- Core owns shared scope storage; Access owns authentication and permission evaluation.
- Preserve tenant isolation, ownership, and lifecycle recovery guarantees.