Rhythm 2.0 Specifications

Appearance

WF-PFM-SEC-015Link a portal member to a contact

Markdown

WF-PFM-SEC-015

Link a portal member to a contact

Markdown
  • DocumentDraft
  • ImplementationObserved

Planning

Implements
CAP-PFM-SEC-020

KindWorkflowProduct areaPlatformModuleSecurity, Customers and WorkspacesRevision1ExaminercodexExamined on2026-10-23

Read atservices-platform ad3f6a65

Link a portal member to a contact ​

What It Does ​

Likely matching separates candidate selection, possession proof and the eventual member/contact link. Candidate offers are sealed, while challenge storage retains a digest and bounded attempts.

The Flow ​

The diagram separates the relevant success, alternative and failure paths. The numbered hop rows retain the detailed authority checks, delegated work and retry limits.

When Something Fails ​

CRM calls use separate transactions from Security writes. Creating a contact does not guarantee the later membership link succeeds. Delivery failure spends the challenge where possible, and unlinked created contacts or possible duplicates remain explicit reconciliation work.

Existing linked membership returns the link. Sequential challenge replacement supersedes visible earlier rows and link writes refuse a visible existing contact claim. Concurrent exclusion across different member rows or simultaneous empty challenge sets is unknown. CRM creation remains separate from the later link write.

Operations act on the caller’s membership. Challenge attempts lock their own row; different members claiming one contact do not share that row lock. The conditional absence check and non-unique contact index do not prove concurrent exclusion. CRM creation can commit before an uncompleted member link.

Open Design Questions ​

The recorded findings retain any stronger planning expectation, missing writer or unproved recovery path. Observed behavior does not approve those outstanding product choices.

Controls

37 controls apply, from the corpus control catalogue.

TC-AVL-001 TC-AVL-004 TC-AVL-005 TC-AZ-001 TC-AZ-002 TC-AZ-003 TC-AZ-004 TC-AZ-006 TC-CRY-001 TC-CRY-002 TC-CRY-003 TC-CRY-004 TC-DAT-001 TC-DAT-002 TC-DAT-003 TC-IAM-001 TC-IAM-002 TC-IAM-004 TC-IAM-005 TC-LOG-004 TC-LOG-005 TC-MON-001 TC-MON-003 TC-PI-001 TC-PI-002 TC-PI-003 TC-PI-004 TC-PI-005 TC-PRV-001 TC-PRV-002 TC-TEN-001 TC-TEN-002 TC-TEN-003 TC-TEN-004 TC-VEN-001 TC-VEN-002 TC-VEN-003

The Markdown files under specs/ in rhythmsoftware/rhythm-v2-docs are the canonical source of truth. This reader is a generated, read-only projection of them.

Rhythm Software