Add optimistic membership lifecycle

2026-09-03 23:22:19 -04:00
parent fe6bd94c9a
commit 59827bf641
10 changed files with 368 additions and 20 deletions
@@ -60,3 +60,8 @@ application concern belongs in the shared module.
  owner and appends its audit before commit. The application still owns route
  authorization, role presentation, CSRF, and the exact fresh-passkey
  operation binding.
+- Extending that page to membership suspension, reactivation, and removal
+  exposed the same time-of-check gap in the older lifecycle methods. The new
+  optimistic extension serializes on the active administrator membership,
+  rechecks the exact state bound into the passkey assertion, applies team and
+  direct-binding consequences, and writes the audit in one transaction.