bai/curriculum-project-hub
1
0
Fork 1
forked from EduCraft/curriculum-project-hub
Code Pull Requests Activity

docs: define platform admin identity boundary

Browse Source
This commit is contained in:
洪佳荣
2026-07-10 13:36:35 +08:00
parent 913a7ae5c0
commit 420c1c40bc
16 changed files with 484 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CONTEXT.md
+24
View File
@@ -24,6 +24,30 @@ _Avoid_: Public management page, member portal
The Organization-scoped Feishu application used for that Organization's login, bot messages, and directory integration; unrelated Organizations never share it.
_Avoid_: Global Feishu app, platform bot
**Platform-owned Feishu Application**:
The dedicated Feishu application used only to authenticate Platform Administrators; it is separate from every Customer-owned Feishu Application and grants no Organization or Project authority.
_Avoid_: Customer-owned Feishu Application, Organization Feishu app
**Platform Administrator Bootstrap**:
The one-time, guarded grant of Platform Administrator authority to a verified Platform Identity when no active Platform Administrator exists.
_Avoid_: Seed administrator, standing bootstrap account
**Platform Administrator Invitation**:
A short-lived, single-use invitation issued by a Platform Administrator and bound to one expected identity from the Platform-owned Feishu Application.
_Avoid_: Open administrator enrollment, unbound administrator invitation
**Platform Session**:
A revocable authentication session bound only to a Platform Identity and its active Platform Administrator authority; it carries no Organization membership or Project authority.
_Avoid_: Organization admin session, customer session
**Platform Audit Entry**:
An immutable, durable record of a platform control-plane decision or action, separate from customer Project and Agent Run audit and mandatory for every platform mutation. Organization Administrators receive only a redacted projection of entries affecting their Organization.
_Avoid_: Best-effort log, Project audit entry
**Emergency Platform Grant**:
Short-lived Platform Administrator authority issued only by the offline recovery procedure for a declared incident and automatically expired afterward.
_Avoid_: Standing break-glass account, permanent emergency administrator
**Provider Credential Mode**:
The Organization's choice between a BYOK Provider Connection and a Platform-managed Provider Connection.
_Avoid_: Global provider setting