7 commits

Author	SHA1	Message	Date
Arthur Bassi	3c090e2757	fix(work-orders): scope comments and completion-doc by account [SH-221] ... Close the remaining SH-221 bypass: board/legacy comments and completion-doc now enforce server-derived account scope, authorize before blob storage, and cover cross-account regressions.	2026-08-11 14:52:02 -03:00
Arthur Bassi	1edcf479ae	fix(work-orders): apply account scope across create and reads [SH-221] ... Stamp WorkOrder.AccountId on all create paths and filter board/list/search/detail by server-derived account claims so scoped callers cannot cross accounts. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-08-11 10:45:37 -03:00
Arthur Bassi	ea2dedf579	!fix(work-orders): fail-closed media account scope with org_scope claim [SH-221]	2026-08-06 10:26:04 -03:00
Arthur Bassi	fdc315d8fe	!feat(work-orders): enforce media account scope and AddMedia freshness [SH-221]	2026-08-06 09:47:34 -03:00
Arthur Bassi	e572786b1c	~docs(work-orders): demote ADR 0001 to Proposed pending CODEOWNERS [SH-116]	2026-08-05 09:57:14 -03:00
Arthur Bassi	8ff4ab1742	fix(work-orders): document single-org media scope (ADR 0001) ... Clarify SH-116 tenant scope as board-aligned ApplyBaseScope + claims, and add out-of-org-scope GET/mutation tests for deleted/template/missing WOs.	2026-08-04 16:07:26 -03:00
Arthur Bassi	f3d2a5cfe7	fix(work-orders): address PR13 phase-1 review feedback	2026-07-17 14:51:56 -03:00