docs: design updates (no filesystem, token bindings, preferences accessor) #5

Merged
KofTwentyTwo merged 1 commits from feature/design-updates into develop 2026-10-14 00:42:44 +00:00
KofTwentyTwo commented 2026-10-14 00:41:07 +00:00 (Migrated from github.com)

Follow-ups to the design from coordination:

  • D11 (owner rule 2026-10-13): no files or filesystem, only the database and S3; stateless services.
  • 7.3: token bindings per SECURED-DATA §14.5 (QRun-IO/qqq#1161): record-bound variables use table␟field␟pk so wipes shred the outbox snapshot too; other values use "email"␟template␟variable␟messageId; low-entropy context values get changed:v1; stand-in mirrors ClassifiedValueTokens.
  • 8.3: the Preferences provider reads UserPreferenceRequestContext.getUserEmailAddress() (core #1162); read-only rows when the account has no address.

🤖 Generated with Claude Code

Follow-ups to the design from coordination: - **D11** (owner rule 2026-10-13): no files or filesystem, only the database and S3; stateless services. - **7.3**: token bindings per SECURED-DATA §14.5 (QRun-IO/qqq#1161): record-bound variables use `table␟field␟pk` so wipes shred the outbox snapshot too; other values use `"email"␟template␟variable␟messageId`; low-entropy context values get `changed:v1`; stand-in mirrors `ClassifiedValueTokens`. - **8.3**: the Preferences provider reads `UserPreferenceRequestContext.getUserEmailAddress()` (core #1162); read-only rows when the account has no address. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
Sign in to join this conversation.