Catalogue and resolve endpoints for the charter editor

Shipped

September 27, 2026 at 4:20 PM UTC

Author

Kamo

Commit

07bbdf2

S1 GET /api/security/charter/catalog and S3 POST /api/security/charter/resolve (spec 4.8). A member draft refused by S6's edit rule answers with S6's bodies (requiredRight on MISSING_RIGHT); a department subject's ids are checked against the caller's org before the ancestor walk; an unreadable draftItems list is a CHARTER_INVALID 400 with an English error (ruling SP03-T16).