- Shipped
- October 28, 2026 at 4:17 AM UTC
- Author
- Kamo
- Commit
- 68d6e71
OrgLeadershipService holds every rule for making or unmaking an organization owner or administrator: only an owner or administrator (or an open god window) may; nobody removes their own; an owner is always an administrator; and every organization keeps at least one LEADER, an active team member with status ACTIVE who is both **************** **************** a member holding the org's Administrator role resolves **************** (CONFIGURE_SYSTEM) as GRANTED after every level and the security model's FORCE rules, so a Department, Job Title, team, member override or FORCE_NUKE can no longer lock administrators out of Security Roles. AI guardrails still run after it.