Rhythm 2.0 Specifications

Appearance

WF-PFM-SEC-006Accept an invitation

Markdown

WF-PFM-SEC-006

Accept an invitation

Markdown
  • DocumentDraft
  • ImplementationObserved

Planning

Implements
CAP-PFM-SEC-005

KindWorkflowProduct areaPlatformModuleSecurity, Customers and WorkspacesRevision1ExaminercodexExamined on2026-10-23

Read atservices-platform ad3f6a65react-console baf6dae3

Accept an invitation ​

What It Does ​

Acceptance proves possession of an existing offer and cannot select a different person or privilege set. The password and provider-link paths both prepare external identity effects before database activation.

The Flow ​

The diagram separates the relevant success, alternative and failure paths. The numbered hop rows retain the detailed authority checks, delegated work and retry limits.

When Something Fails ​

Single-use applies to conditional database consumption. It does not serialize provider passwords across concurrent acceptances. That race is a finding requiring a test and a product decision rather than a promise of safe retry.

Conditional consumption admits one database acceptance winner; an already accepted token for an active member returns the prior success. Provider enabling and password setting occur before this transaction and can be repeated or raced. Link-session consumption is also conditional; neither database condition proves atomic external-provider effects.

Acceptance re-evaluates inviter authority before activation and commits token consumption, membership activation and pending grants together. Two password requests can both reach the provider before one loses database consumption; the credential race remains unresolved.

Open Design Questions ​

The recorded findings retain any stronger planning expectation, missing writer or unproved recovery path. Observed behavior does not approve those outstanding product choices.

Controls

44 controls apply, from the corpus control catalogue.

TC-AVL-001 TC-AVL-004 TC-AVL-005 TC-AZ-001 TC-AZ-002 TC-AZ-003 TC-AZ-004 TC-AZ-006 TC-CRY-001 TC-CRY-002 TC-CRY-003 TC-CRY-004 TC-DAT-001 TC-DAT-002 TC-DAT-003 TC-DAT-004 TC-IAM-001 TC-IAM-002 TC-IAM-004 TC-IAM-005 TC-LOG-001 TC-LOG-002 TC-LOG-003 TC-LOG-004 TC-LOG-005 TC-MON-001 TC-MON-003 TC-PI-001 TC-PI-002 TC-PI-003 TC-PI-004 TC-PI-005 TC-PRV-001 TC-PRV-002 TC-SEC-001 TC-SEC-002 TC-SEC-003 TC-SEC-004 TC-TEN-001 TC-TEN-002 TC-TEN-003 TC-VEN-001 TC-VEN-002 TC-VEN-003

The Markdown files under specs/ in rhythmsoftware/rhythm-v2-docs are the canonical source of truth. This reader is a generated, read-only projection of them.

Rhythm Software