feat(release): disclose module permissions in catalog

2026-08-07 01:59:18 +02:00
parent 78811f7f6e
commit dce725636d
3 changed files with 48 additions and 1 deletions
@@ -217,6 +217,11 @@ requirements. Missing dependency/interface providers and unsupported update
 windows are surfaced before an operator adds the entry to a plan; installer
 preflight remains authoritative.

+Catalog entries also carry the permission definitions declared by the tagged
+module manifest. Admin groups and exposes their scopes before an install or
+update is planned. This is disclosure only: installing a module does not grant
+its permissions to an account, role, group, tenant, or service account.
+
 Package lifecycle and availability are intentionally separate:

 - install, update, and uninstall change the instance-wide package composition;