Add atomic owned organization creation

docs/DOGFOOD.md

@@ -8,6 +8,16 @@ application concern belongs in the shared module.
 
 ## Gamertan accounts and commerce
 
+- Shared business purchasing exposed the difference between an initial member
+  and an initial RBAC owner. The historical organization creation method commits
+  membership but no access binding. The new `CreateOwnedOrganization` extension
+  grants the application-configured role and writes both audits atomically for
+  an existing active, fully registered user. It rejects missing roles and
+  unsupported adapters instead of leaving an ownerless organization behind.
+  SQLite tests inject failure at every write stage, including the second audit,
+  and race duplicate creates. Customer/merchant vocabulary remains application
+  policy; there is no new database schema or commerce dependency in Foundations.
+
 - The account email remains required and unique. Gamertan uses normalized
   email as the canonical login identifier and keeps username as a stable public
   identity. Until a mail package exists, the application must not describe an