Add bounded administrative identity directories

2026-09-05 01:19:57 -04:00
parent d476179148
commit 7c68a3499a
11 changed files with 352 additions and 5 deletions
@@ -8,6 +8,13 @@ application concern belongs in the shared module.

 ## Gamertan accounts and commerce

+- Instance operators need all-user/all-organization directories, not a staff
+  roster or implicit membership in every business. Optional bounded readers now
+  expose identity/profile records without credentials, independent of membership.
+  The application must authorize each call through an explicit instance scope;
+  these readers intentionally contain no Gamertan-specific roles or UI policy.
+  Stable-ID cursors and literal searches are covered against pagination gaps,
+  renamed profiles, inactive/personal records and wildcard/query injection.
 - Customer profile and membership editing requires current ownership for every
  write, not just changes involving another owner. The existing generic methods
  intentionally permit application-authorized delegated administrators, so an