Initialize identity module

README.md

@@ -0,0 +1,39 @@
+# GovOPlaN Identity
+
+`govoplan-identity` is the canonical identity directory module for GovOPlaN.
+
+It owns identities and links between identities and platform accounts. This is
+separate from IDM connectors and from access control.
+
+## Boundary
+
+Identity owns:
+
+- identity records for people, services, and other internal subjects
+- account links for identities that can use multiple accounts
+- primary account selection for display and explainability
+- accepted normalized identity facts after import or manual administration
+
+Identity does not own:
+
+- password authentication, sessions, API keys, or CSRF
+- roles, rights, permission evaluation, or access decisions
+- organization units, functions, or function assignments
+- external directory connector internals
+
+## Module Contract
+
+The module registers the `identity.directory` capability from
+`govoplan_core.core.identity`.
+
+Feature modules should consume the capability instead of importing identity ORM
+models.
+
+## Development Install
+
+From the core checkout:
+
+```bash
+cd /mnt/DATA/git/govoplan-core
+./.venv/bin/python -m pip install -e ../govoplan-identity
+```