Rhythm 2.0 Specifications

Appearance

WF-PFM-SEC-005Invite a person and deliver the invitation

Markdown

WF-PFM-SEC-005

Invite a person and deliver the invitation

Markdown
  • DocumentDraft
  • ImplementationObserved

Planning

Implements
CAP-PFM-SEC-008, CAP-PFM-SEC-016, CAP-PFM-SEC-003

KindWorkflowProduct areaPlatformModuleSecurity, Customers and WorkspacesRevision1ExaminercodexExamined on2026-10-23

Read atservices-platform ad3f6a65react-console baf6dae3

Invite a person and deliver the invitation ​

What It Does ​

Invitation persists the offer before any provider or sender call. The hop rows separate delegated authority, database creation, sign-in account preparation, token issuance and message delivery.

The Flow ​

The diagram separates the relevant success, alternative and failure paths. The numbered hop rows retain the detailed authority checks, delegated work and retry limits.

When Something Fails ​

Delivery failure does not undo the invitation. Issuance can precede policy withholding or failed sending, and concurrent delivery order does not identify the valid link. The recorded finding asks for race proof and a clear retry experience.

Preparation finds an existing recorded or named provider account before creating one. Resend replaces the invitation; token validity follows the current invitation and digest, not the last e-mail delivered. Active memberships use role management, invited memberships use resend and revoked memberships reuse their retained row for a new offer.

Membership, invitation, pending grants and database history commit together. Uniqueness prevents duplicate outstanding invitations within the membership boundary. Provider and e-mail work run after the transaction.

Open Design Questions ​

The recorded findings retain any stronger planning expectation, missing writer or unproved recovery path. Observed behavior does not approve those outstanding product choices.

Controls

54 controls apply, from the corpus control catalogue.

TC-AVL-001 TC-AVL-004 TC-AVL-005 TC-AZ-001 TC-AZ-002 TC-AZ-003 TC-AZ-004 TC-AZ-005 TC-CHG-001 TC-CHG-002 TC-CHG-003 TC-CHG-004 TC-CHG-005 TC-CHG-006 TC-CHG-007 TC-CRY-001 TC-CRY-002 TC-CRY-003 TC-CRY-004 TC-DAT-001 TC-DAT-002 TC-DAT-003 TC-DAT-004 TC-IAM-001 TC-IAM-002 TC-IAM-003 TC-IAM-004 TC-IAM-005 TC-IAM-006 TC-LOG-001 TC-LOG-002 TC-LOG-003 TC-LOG-004 TC-LOG-005 TC-MON-001 TC-MON-002 TC-MON-003 TC-PI-001 TC-PI-002 TC-PI-003 TC-PI-004 TC-PI-005 TC-PRV-001 TC-PRV-002 TC-SEC-001 TC-SEC-002 TC-SEC-003 TC-SEC-004 TC-TEN-001 TC-TEN-002 TC-TEN-003 TC-VEN-001 TC-VEN-002 TC-VEN-003

The Markdown files under specs/ in rhythmsoftware/rhythm-v2-docs are the canonical source of truth. This reader is a generated, read-only projection of them.

Rhythm Software