Loading…
Full name: pub.techne.draft.membership
A statement by a collective that someone holds a role in it.
It is a collective-authored membership claim: subject holds role in the authoring collective. The role index LIVES HERE (roles are data, never an access-layer field). Authored ONLY by the collective (authority), provenance rule AuthoredByAuthority; a subject may hold MULTIPLE membership claims per collective (no uniqueness; atLeast = ∃ claim ≥ n). Placement: PUBLIC by default; may be placed in the collective's space when the collective's membership is itself private (in-space claims surface only to viewers who can read that space). A pending collective INVITE is this claim with an opaque placeholderId subject, it grants nothing until bind. End a membership with validUntil; delete only to erase a mistake: a deleted claim leaves no end, so the records it backed by role (a check-in) go back to pending.