Sync Repo-docs-MODULE-ARCHITECTURE from project files

2026-07-06 20:01:41 +02:00
parent 153f4e4a3d
commit 6f8e947007

@@ -1,4 +1,4 @@
<!-- codex-wiki-sync:0fe10429f2b49107da579c69 --> <!-- codex-wiki-sync:0e9ea4738aad52fd7f810ccb -->
> Mirrored from `/mnt/DATA/git/govoplan-core/docs/MODULE_ARCHITECTURE.md`. > Mirrored from `/mnt/DATA/git/govoplan-core/docs/MODULE_ARCHITECTURE.md`.
> Origin: `repository`. > Origin: `repository`.
@@ -77,15 +77,17 @@ Known access-related capability names are defined in
- `access.directory` - `access.directory`
- `access.permissionEvaluator` - `access.permissionEvaluator`
- `access.resourceAccess` - `access.resourceAccess`
- `access.tenantProvisioner`
- `tenancy.tenantResolver` - `tenancy.tenantResolver`
- `security.secretProvider` - `security.secretProvider`
- `audit.sink` - `audit.sink`
`govoplan-access` currently registers `access.principalResolver`, `govoplan-access` currently registers `access.principalResolver`,
`access.permissionEvaluator`, and `access.directory`. `govoplan-tenancy` `access.permissionEvaluator`, `access.directory`, and
registers `tenancy.tenantResolver`. Feature modules should prefer these `access.tenantProvisioner`. `govoplan-tenancy` registers
capabilities over direct reads of access/tenant ORM models when they need `tenancy.tenantResolver`. Feature modules should prefer these capabilities over
labels, group membership, or tenant metadata. direct reads of access/tenant ORM models when they need labels, group
membership, default access provisioning, or tenant metadata.
## Module Responsibilities ## Module Responsibilities