docs: define platform admin identity boundary

2026-07-10 13:36:35 +08:00
parent 913a7ae5c0
commit 420c1c40bc
16 changed files with 484 additions and 15 deletions
@@ -11,3 +11,6 @@ structured messages, and operational recovery events without weakening
 `Spec.System.Audit`'s pinned AuditEntry-to-run relation. Decide durability,
 failure, retention, and query semantics; then enforce referential integrity and
 observable/recoverable writes instead of silently swallowing lost evidence.
+Do not merge these customer Project/Run records with ADR-0023's already-decided
+separate, append-only, fail-closed Platform Audit; decide only any shared
+retention/export infrastructure without weakening either semantic boundary.