Rhythm 2.0 Specifications

Appearance

DOM-PFM-TNL-001Workspace Lifecycle

Markdown

DOM-PFM-TNL-001

Workspace Lifecycle

Markdown
  • DocumentDraft
  • ImplementationObserved

Planning

Specified by
CON-PFM-TNL-001

Design

Owned by
SVC-PFM-TNL-tenants

KindDomain objectProduct areaPlatformModuleWorkspace Lifecycle Across ApplicationsRevision1

Read atservices-platform ad3f6a65services-crm a8d1364fservices-commerce c8b66a98services-committees 36129c24services-membership 5994c270services-submissions 64236c19services-websites 5fc6823cservices-marketing d071a159

Workspace Lifecycle ​

What It Models ​

Workspace readiness and removal standing are system facts on the administrative workspace record. They control request availability separately from the customer’s business standing.

Identity and Attributes ​

This object uses the workspace’s permanent identifier and has no independent record identity. System-owned construction, active, loading or removal standing; direct creation defaults active. Administrative live, implementation or disabled standing, constrained against loading and removal lifecycle. The first provisioning activation stamp; absence selects unopened treatment unless disposable policy takes precedence. Latest load-opening time, required while loading and retained by activation. Staff actor for the latest opening, required while loading. An optional opening explanation bounded to five hundred characters. A false-by-default test designation for accelerated non-Production removal. A request-specific available, unavailable or read-only result from cached workspace facts and route context. The local diagnostic reason for a uniform unavailable response.

Relationships ​

Workspace administration owns the shared row; lifecycle owns the system facts. The attempt retains its workspace reference. Loading facts occupy the same workspace record. The request retains copied identity without depending on the workspace row.

Invariants ​

The structured invariants distinguish service and database enforcement from documented obligations. The listed enforcement points bound what the workflow can rely on.

How It Is Stored and Shared ​

Platform’s lifecycle service owns this design object. The physical declarations identify its stored records, while shared jobs provide durable execution and inspection.

Open Design Questions ​

Availability copies and HQ writes outside the gate limit a universal access claim. Restore reapplication remains necessary because the gate does not read the external deletion ledger.

Relationships

ToCardinalityOwnershipCrosses a serviceOn archive or delete
DOM-PFM-SEC-002one-to-oneWorkspace administration owns the shared row; lifecycle owns the system facts.no
DOM-PFM-TNL-002one-to-manyThe attempt retains its workspace reference.no
DOM-PFM-TNL-004one-to-oneLoading facts occupy the same workspace record.no
DOM-PFM-TNL-005one-to-manyThe request retains copied identity without depending on the workspace row.no

Invariants

InvariantProtectsEnforced atProvenance
INV-DOM-PFM-TNL-001-01
Ordinary lifecycle changes use the locked row and successor table; restore reapplication separately forces deleting, and accepted same-state writes can still update bookkeeping.
serviceobserved
services-platform:modules/tenants/services/lifecycle/lifecycle-transitions.ts:assertLifecycleTransition; services/persistence/tenants.ts:forceTenantDeletingAfterRestore
INV-DOM-PFM-TNL-001-02
The ordinary successor table offers no move out of deleting.
serviceobserved
services-platform:modules/tenants/services/lifecycle/lifecycle-transitions.ts:SUCCESSORS
INV-DOM-PFM-TNL-001-03
Loading requires implementation standing, and both removal states require disabled standing.
databaseobserved
services-platform:modules/tenants/db/tenants.table.ts:tenants_deletion_pending_status_check, tenants_deleting_status_check, tenants_loading_status_check
INV-DOM-PFM-TNL-001-04
Loading requires an opening actor and timestamp.
databaseobserved
services-platform:modules/tenants/db/tenants.table.ts:tenants_loading_entered_check
INV-DOM-PFM-TNL-001-05
Client record input cannot select lifecycle or first provisioning activation.
api, servicedocumented
services-platform:docs/tenants/tenant-lifecycle-plan.md#§2.2 No API sets lifecycle_state
INV-DOM-PFM-TNL-001-06
The availability rule admits ordinary active non-disabled requests, rejects missing workspaces and makes deleting read-only for authorized staff system routes.
serviceobserved
services-platform:modules/tenants/services/access/tenant-availability.ts:tenantAvailabilityOf
INV-DOM-PFM-TNL-001-07
Loading permits authorized data-job routes for callers outside the staff system exception.
serviceobserved
services-platform:modules/tenants/services/access/tenant-availability.ts:isDataJobRoute
INV-DOM-PFM-TNL-001-08
The documented policy excludes disposable standing from Production.
servicedocumented
services-platform:docs/tenants/tenant-lifecycle-plan.md#§5.3 Disposable test tenants

The Markdown files under specs/ in rhythmsoftware/rhythm-v2-docs are the canonical source of truth. This reader is a generated, read-only projection of them.

Rhythm Software