- Shipped
- November 15, 2026 at 5:11 AM UTC
- Author
- Kamo
- Commit
- 6c2b65d
MemberRights.has answers true for the caller's own GD session (every HR, legal, compliance, careers, training, imaging and doc-share gate goes through it); recording files decide GOD for GD; GD sessions read at PRIVILEGED clearance. A GD pass in a tenant org writes a phi_access_log row (platformStaff, PLATFORM_STAFF basis) through the existing PhiAccessRecorder, once per gate per request; the platform org comes from the configured kamo.compliance.platform-org-id (no lookup). Never throws.