Workspace Addresses Require Strict Entry

Context

A shared record link needs to identify the organization’s workspace independently of browser preferences.

Decision

Put the workspace identifier in the address and withhold requested content until Security answers for that workspace. A response naming another workspace is rejected.

Alternatives Considered

Browser-only selection makes identical links context-dependent. Replacing a refused workspace with the default would misrepresent where the requested record belongs.

Consequences

Bookmarks preserve context. Refused entry has explicit outcomes, and older context-free addresses require temporary compatibility mapping.