Rhythm 2.0 Specifications

Appearance

WF-PFM-SEC-010Reconcile derived role assignments

Markdown

WF-PFM-SEC-010

Reconcile derived role assignments

Markdown
  • DocumentDraft
  • ImplementationPartially observed

Planning

Implements
CAP-PFM-SEC-014

KindWorkflowProduct areaPlatformModuleSecurity, Customers and WorkspacesRevision1ExaminercodexExamined on2026-10-23

Read atservices-platform ad3f6a65

Reconcile derived role assignments ​

What It Does ​

Derived access belongs to its source. Eligibility reconciliation computes outside the transaction and then synchronizes the decided assignments under derivation-key locks.

The Flow ​

The diagram separates the relevant success, alternative and failure paths. The numbered hop rows retain the detailed authority checks, delegated work and retry limits.

When Something Fails ​

Expiry is the fail-safe for eligibility-bound renewals. The shared function accepts source-owned validity, so the design does not assert a universal lifetime for appointment-derived rows. Newly eligible subjects are not discovered by the existing-row nightly scan.

Source synchronization uses binding/contact or appointment/rule derivation keys and unique live rows. An unchanged desired set converges. Nightly submission uses workspace and UTC day to deduplicate repeated scheduling; redelivered queue work reconciles again.

Derivation-key locks serialize synchronization for the same subject. Eligibility evaluation runs outside the write transaction; the desired set commits together afterward. Nightly scans cover contacts already holding derived rows, rather than discovering every newly eligible contact.

Open Design Questions ​

The recorded findings retain any stronger planning expectation, missing writer or unproved recovery path. Observed behavior does not approve those outstanding product choices.

Controls

45 controls apply, from the corpus control catalogue.

TC-AVL-001 TC-AVL-004 TC-AVL-005 TC-AZ-001 TC-AZ-002 TC-AZ-003 TC-AZ-004 TC-AZ-006 TC-CRY-001 TC-CRY-002 TC-CRY-003 TC-CRY-004 TC-DAT-001 TC-DAT-002 TC-DAT-003 TC-IAM-001 TC-IAM-002 TC-IAM-004 TC-IAM-005 TC-IAM-006 TC-LOG-001 TC-LOG-002 TC-LOG-003 TC-LOG-004 TC-LOG-005 TC-MON-001 TC-MON-003 TC-PI-001 TC-PI-002 TC-PI-003 TC-PI-004 TC-PI-005 TC-PRV-001 TC-PRV-002 TC-SEC-001 TC-SEC-002 TC-SEC-003 TC-SEC-004 TC-TEN-001 TC-TEN-002 TC-TEN-003 TC-TEN-004 TC-VEN-001 TC-VEN-002 TC-VEN-003

The Markdown files under specs/ in rhythmsoftware/rhythm-v2-docs are the canonical source of truth. This reader is a generated, read-only projection of them.

Rhythm Software