Rhythm 2.0 Specifications

Appearance

SVC-PFM-SEC-securitySecurity Service Module

Markdown

SVC-PFM-SEC-security

Security Service Module

Markdown
  • DocumentDraft
  • ImplementationObserved

KindService contractProduct areaPlatformModuleSecurity, Customers and WorkspacesRevision1ExaminercodexExamined on2026-10-23

Read atservices-platform ad3f6a65react-console baf6dae3

Security Service Module ​

What This Service Is For ​

Security owns memberships and authentication identities, access definitions, assignments, staff grants, machine principals and their security history. It provides evaluated context to the console and protected human API requests, while machine calls use their separate cloud-role/principal path.

Boundary ​

Eligibility owns rule definitions and evaluation; Security stores the resulting assignments. Committees owns appointments and supplies their source-managed derived assignments. CRM owns contacts and candidate matching data; Security owns member linking and possession challenges. Licensing owns license state read by permission and application evaluation. Console Shell owns navigation and boot gating from evaluated security context. Websites and Sites determine when their workspace needs portal onboarding.

Operations in Words ​

The operations group personal context and access explanation; member invitation and lifecycle; role, policy and assignment administration; staff entry and principals; and portal registration, recovery and contact linking. Their operation rows identify exact access and planning capability references.

Operation rows preserve route-declared access, permission and planning capability references. None declares a Submissions binding. The module makes no model inference call; its inference list is empty.

Events and Jobs ​

The declared job inventory covers durable execution and queued background work. Event declarations distinguish actual provisioning notifications from the absence of domain-change events.

Consistency Guarantees ​

The consistency rows distinguish database authority, external provider effects, queued work, gateway caching and registry publication. Suspension and reinstatement have no durable provider retry; revocation and deletion do. Acceptance is the explicit provider-before-database exception, with its credential race recorded as a finding.

Catalog and route-registry activation cross separate stores. CRM contact creation and membership linking also cross transaction boundaries. These gaps and missing failure-recovery proofs remain open rather than being described as atomic guarantees.

Owns
DOM-PFM-SEC-003
Repository
services-platform

Controls

57 controls apply, from the corpus control catalogue.

TC-AVL-001 TC-AVL-004 TC-AVL-005 TC-AZ-001 TC-AZ-002 TC-AZ-003 TC-AZ-004 TC-AZ-005 TC-AZ-006 TC-CHG-001 TC-CHG-002 TC-CHG-003 TC-CHG-004 TC-CHG-005 TC-CHG-006 TC-CRY-001 TC-CRY-002 TC-CRY-003 TC-CRY-004 TC-DAT-001 TC-DAT-002 TC-DAT-003 TC-DAT-004 TC-DAT-005 TC-IAM-001 TC-IAM-002 TC-IAM-003 TC-IAM-004 TC-IAM-005 TC-IAM-006 TC-LOG-001 TC-LOG-002 TC-LOG-003 TC-LOG-004 TC-LOG-005 TC-MON-001 TC-MON-002 TC-MON-003 TC-PI-001 TC-PI-002 TC-PI-003 TC-PI-004 TC-PI-005 TC-PRV-001 TC-PRV-002 TC-PRV-004 TC-SEC-001 TC-SEC-002 TC-SEC-003 TC-SEC-004 TC-TEN-001 TC-TEN-002 TC-TEN-003 TC-TEN-004 TC-VEN-001 TC-VEN-002 TC-VEN-003

Does Not Own

  • Eligibility owns rule definitions and evaluation; Security stores the resulting assignments.
  • Committees owns appointments and supplies their source-managed derived assignments.
  • CRM owns contacts and candidate matching data; Security owns member linking and possession challenges.
  • Licensing owns license state read by permission and application evaluation.
  • Console Shell owns navigation and boot gating from evaluated security context.
  • Websites and Sites determine when their workspace needs portal onboarding.

The Markdown files under specs/ in rhythmsoftware/rhythm-v2-docs are the canonical source of truth. This reader is a generated, read-only projection of them.

Rhythm Software