Completed in bdc161e. Access evaluation is centralized in an explicit decision table with focused coverage for function membership, hierarchy, vacancy, withdrawal, expiry, and tenant boundaries.…
Completed in Campaign cd223cb, Postbox bdc161e, and Core 9b88ae3. Campaign reports now include producer-scoped Postbox current-access, read, acknowledgement, route, withdrawal, and expiry…
Implemented in Campaign cd223cb on Core contract 9b88ae3. Saves/autosaves require the current strong ETag and base revision, stale writes return bounded refresh metadata, disjoint changes can…
Implemented in cd223cb. Test sends, initial single-message sends, and explicit resends use an idempotent action/attempt ledger with immutable message and recipient evidence, actor/reason…
Implemented in Mail b8029c2 and Core 9b88ae3. Delivery commands, attempts, reconciliation state, idempotent claims, purge/dispatch workers, API/capability contracts, migrations, and operational…
Implemented in 835eacf. Files now has persisted integrity reconciliation, bounded scans, missing/corrupt/orphan detection, fail-closed reads, deduplicated repair behavior, administration…
Implemented in 835eacf. Managed-file shares now have explicit active/expiry/revocation state, audited lifecycle operations, searchable targets, confirmation/count UI, and migration/regression…
Implemented in da15645, with the shared contract validation in Core 9b88ae3. Documentation output is configuration/capability aware, explains unavailable content, carries source provenance,…
Implemented in da15645. The Docs API now exposes bounded source listing and source inspection with provider provenance and safe optional-module behavior. Backend tests pass.