- Shipped
- November 15, 2026 at 5:40 AM UTC
- Author
- Kamo
- Commit
- b81852a
Owner GOD RULE 2026-11-14: a GD session passes every rights/role gate with no god-mode window. New security/GodAccess is the one reader (GD via **************** a pass in a tenant org that god does not actually hold writes one phi_access_log row per gate per request through the existing PhiAccessRecorder, platform org from the cached PlatformOrgResolver, never throws. Gates: SessionRights.has/decide (so MemberRights.has for the caller), every controller **************** CalendarSession, AudienceScope, DomainController platform-subdomain path, NoReply ledger (GD in any org), Platform deliverability + outbound hosts (platform rights). The window stays a marker only.