Block a user
Migrate access function model to organizations.directory
Codex State: progress
Summary
- Access now consumes organizations.directory for function metadata and idm.directory for accepted function assignments in explanation/role-source flows. -…
Add organization administration API and WebUI
Codex State: progress
Summary
- Baseline organization model API and /organizations editor are implemented for unit types, structures, relation types, units, relations, function types, and…
Define delegation and acting-in-place lifecycle rules
Codex State: progress
Summary
- Organizations stores function-level delegable and acting-in-place flags; IDM assignment writes validate delegated and acting-for source semantics.
- Access…
Add semantic access admin WebUI and acting-in-place context selector
Codex State: progress
Summary
- Backend semantic access storage, external function role mappings, and explanation provenance are in place.
- Organizations and IDM now deep-link into their…
[Task] Introduce outbox table and dispatcher for production-safe event delivery
[Feature] Move hierarchical policy evaluation into policy
[Feature] Add policy simulation before destructive/limiting changes
[Task] Separate command bus from event bus
[Feature] Ensure core-only startup still works enough to show shell/health, but access is required for authenticated product use
[Task] Introduce outbox table and dispatcher for production-safe event delivery
Codex State: done
Summary
- Added audit_outbox_events and SqlAuditOutbox for durable PlatformEvent delivery with retry state.
- Audit module retirement/uninstall guards now cover both…
[Feature] Add policy simulation before destructive/limiting changes
Codex State: done
Summary
- Added a retention policy simulation/preflight endpoint for proposed write payloads.
- Simulation returns allowed, changed fields, issues, before/requested…
[Feature] Move hierarchical policy evaluation into policy
Codex State: done
Summary
- Added reusable hierarchical policy validation helpers in govoplan_policy.backend.hierarchy.
- Privacy retention now routes parent-lock and effective policy…
[Task] Separate command bus from event bus
Codex State: done
Summary
- Added an audit-owned CommandBus/AuditCommand contract separate from PlatformEvent delivery.
- Documented commands as requested work and events as completed…
[Feature] Move delegation ceilings and "more restrictive only" validation into policy
[Feature] Define tenant lifecycle events: created, suspended, resumed, deletion requested, erasure completed
[Feature] Ensure core-only startup still works enough to show shell/health, but access is required for authenticated product use
Codex State: done
Summary
- Removed the package-level govoplan-tenancy dependency while keeping tenancy as an optional module integration.
- Documented core-only startup semantics:…