God (GD) passes every right in every org

Shipped

November 15, 2026 at 5:14 AM UTC

Author

Kamo

Commit

e0c4256

GOD RULE (owner 2026-11-14): GD alone, no god-mode window, passes CONFIGURE_SYSTEM (org sounds), MANAGE_PLATFORM_SOUNDS (any org; the System User refusal stays), CREATE_DOCUMENTS / EDIT_DOCUMENTS on imaging uploads, and VIEW_DOCUMENTS on HR audio. A tenant-org pass writes a durable phi_access_log row (PLATFORM_STAFF basis) via the existing PhiAccessRecorder; the platform org is read once and cached (it was a DB query per request). Audit and lookup failures never throw.