Sync Repo-docs-ACCESS-EXTRACTION-PLAN from project files

2026-07-06 20:54:54 +02:00
parent 99a67c0a50
commit 2eb90eb3c6

@@ -1,4 +1,4 @@
<!-- codex-wiki-sync:1cf44edce1c7499eac1e8e1e --> <!-- codex-wiki-sync:270c19e5c534a991015f13f1 -->
> Mirrored from `/mnt/DATA/git/govoplan-core/docs/ACCESS_EXTRACTION_PLAN.md`. > Mirrored from `/mnt/DATA/git/govoplan-core/docs/ACCESS_EXTRACTION_PLAN.md`.
> Origin: `repository`. > Origin: `repository`.
@@ -316,7 +316,7 @@ Acceptance criteria:
- `govoplan-files`, `govoplan-mail`, and `govoplan-campaign` do not import - `govoplan-files`, `govoplan-mail`, and `govoplan-campaign` do not import
access implementation modules or sibling feature modules. access implementation modules or sibling feature modules.
- Dependency-boundary allowlist shrinks after every replacement. - Dependency-boundary allowlist stays empty after each replacement.
### Stage 7: Remove Compatibility Debt ### Stage 7: Remove Compatibility Debt
@@ -325,7 +325,7 @@ Finalize the split.
Tasks: Tasks:
- Remove obsolete core compatibility aliases. - Remove obsolete core compatibility aliases.
- Remove remaining allowlist entries from the boundary checker. - Keep the dependency-boundary checker allowlist empty.
- Update release dependency docs. - Update release dependency docs.
- Update operator migration notes. - Update operator migration notes.
- Add full module permutation tests including access-present and access-absent - Add full module permutation tests including access-present and access-absent
@@ -382,6 +382,15 @@ Acceptance criteria:
- [x] Move shared system-settings, tenant-governance, slug/error, and - [x] Move shared system-settings, tenant-governance, slug/error, and
tenant-count helpers out of access internals into core settings/tenancy tenant-count helpers out of access internals into core settings/tenancy
helpers used by the split platform route modules. helpers used by the split platform route modules.
- [x] Move campaign schema routes into the campaign route contribution.
- [x] Move development mailbox routes into the mail route contribution.
- [x] Replace core Celery direct campaign/mail imports with the
`campaigns.deliveryTasks` capability.
- [x] Replace core retention direct campaign queries with
`campaigns.policyContext` and `campaigns.retention` capabilities.
- [x] Replace core `create_all` feature-model imports with module registry
metadata discovery.
- [x] Remove transitional boundary checker allowlist entries.
- [ ] Move legacy admin service and model ownership out of the access - [ ] Move legacy admin service and model ownership out of the access
compatibility implementation into access, tenancy, policy, audit, and core compatibility implementation into access, tenancy, policy, audit, and core
settings modules. settings modules.
@@ -391,9 +400,10 @@ Acceptance criteria:
- [x] `govoplan-files` - [x] `govoplan-files`
- [x] `govoplan-mail` - [x] `govoplan-mail`
- [x] `govoplan-campaign` - [x] `govoplan-campaign`
- [ ] Replace direct cross-module SQL lookups with provider/event contracts. - [x] Replace files/mail/campaign direct cross-module SQL lookups with
provider/capability contracts.
- [ ] Move access admin WebUI pages to module route contributions. - [ ] Move access admin WebUI pages to module route contributions.
- [ ] Remove transitional boundary checker allowlist entries as each contract - [x] Remove transitional boundary checker allowlist entries as each contract
lands. lands.
- [ ] Move campaign-scoped mail policy ownership fully behind an API/event - [ ] Move campaign-scoped mail policy ownership fully behind an API/event
workflow if direct synchronous capability calls become too tight for later workflow if direct synchronous capability calls become too tight for later