Rhythm 2.0 Specifications

Appearance

DOM-PFM-ELG-003Eligibility Decision

Markdown

DOM-PFM-ELG-003

Eligibility Decision

Markdown
  • DocumentDraft
  • ImplementationObserved

Planning

Specified by
CON-PFM-ELG-003

Design

Owned by
SVC-PFM-ELG-eligibility

KindDomain objectProduct areaPlatformModuleEligibility, Responsibilities and AttentionRevision1

Read atservices-platform ad3f6a65react-console baf6dae3

Eligibility Decision ​

What It Models ​

A decision explains qualification at a particular moment. Population and simulation records collect related evaluations for comparison and enumeration.

Identity and Attributes ​

Recorded history identifies the evaluated release and subject slots without storing raw caller facts.

Relationships ​

Rule and use references preserve evaluation context, while the job engine owns durable execution machinery.

Invariants ​

Recording guarantees differ by entry point and consistency; selection for history does not guarantee a deferred display insert succeeds.

How It Is Stored and Shared ​

Eligibility owns the append-only decision store and run records. Decisions use monthly partitions; none of these records declares custom fields.

Open Design Questions ​

The SQL-only path has no history insert, display persistence has no durable repair, and run expiry lacks a deployed schedule.

Relationships

ToCardinalityOwnershipCrosses a serviceOn archive or delete
DOM-PFM-ELG-002Multiple decisions can name one use; a recorded decision can also have no use reference.History retains the reference without a lifetime foreign key to the use.no
DOM-PFM-ELG-001A release can be referenced by many decisions, population runs and simulations.These evaluation records retain their release context.no

Invariants

InvariantProtectsEnforced atProvenance
INV-DOM-PFM-ELG-003-01
Ordinary application access can insert and read decisions but cannot update or delete them; retention and restricted deletion remove history.
databaseobserved
services-platform:docs/eligibility.md#3. Row-level security
INV-DOM-PFM-ELG-003-02
Each decision belongs to the UTC month of its evaluation and must fit that partition.
databaseobserved
services-platform:modules/eligibility/db/eligibility-decisions.table.ts:eligibility_decisions_month_check
INV-DOM-PFM-ELG-003-03
Decision reads explicitly constrain the workspace because the history table has no ordinary row policy.
serviceobserved
services-platform:modules/eligibility/services/persistence/decisions.ts
INV-DOM-PFM-ELG-003-04
Authorization recording and the in-transaction evaluator await insertion; the SQL-only transaction check returns without inserting history.
serviceobserved
services-platform:modules/eligibility/services/evaluate/decision-recording.ts:recordDecisions
INV-DOM-PFM-ELG-003-05
A missing workspace subject produces indeterminate with a not-found reason before uncertainty policy is applied.
service, databaseobserved
services-platform:modules/eligibility/services/evaluate/subject-existence.ts
INV-DOM-PFM-ELG-003-06
Authorization, transactional, indeterminate, test and dry-run answers bypass the display cache.
serviceobserved
services-platform:modules/eligibility/services/evaluate/decision-cache.ts:isCacheable
INV-DOM-PFM-ELG-003-07
Population pages atomically advance counts, subjects and cursor only when the stored cursor matches their starting position.
service, databaseobserved
services-platform:modules/eligibility/services/population/population-run.ts:evaluatePopulationPage
INV-DOM-PFM-ELG-003-08
Workspace-scoped reads reject other workspaces’ decisions, runs and simulations, and workspace deletion purges them.
service, databaseobserved
services-platform:modules/eligibility/services/maintenance/tenant-participant.ts

The Markdown files under specs/ in rhythmsoftware/rhythm-v2-docs are the canonical source of truth. This reader is a generated, read-only projection of them.

Rhythm Software