Block a user
[Task] Decide: Is
govoplan-access required for any authenticated deployment, while core-only remains a diagnostics/settings shell?
[Task] Remove transitional boundary checker allowlist entries as each contract lands
[Task] Move access admin WebUI pages to module route contributions
[Task] Replace direct cross-module SQL lookups with provider/event contracts
[Task] Replace feature-module direct user/group/tenant model imports
[Task] Move auth/session/API-key routes behind access module manifest
[Task] Access extraction Stage 7: Remove Compatibility Debt
[Task] Access extraction Stage 6: Decouple Feature Modules
[Task] Access extraction Stage 5: Move Admin And WebUI Contributions
[Task] Access extraction Stage 4: Move Auth Routes And Dependencies
[Task] Access extraction Stage 3: Move Live Models And Migrations
[Task] Access extraction Stage 2: Create
govoplan-access
[Task] Access extraction Stage 1: Contract Definitions
[Debt] Remove legacy compatibility code only after migration/export compatibility requirements are explicit
[Debt] Define and implement a DataGrid column sizing contract with min width, preferred percentage/fraction width, max width, and initial layout that respects min/max without de...
[Debt] Revisit the fragile DataGrid fill-column/buffer resize issue later with focused tests
[Feature] Allow module configuration so behavior can be controlled through settings
[Feature] Make modules installable, activatable, deactivatable, and uninstallable via the admin interface, including migration and rollback constraints
[Task] WebUI-driven update/rollback with backup and rollback guardrails
[Task] Server update from WebUI only after CLI backup/restore is proven