feat(security): ADR-0090 P2 — everyone/guest audience anchors, additive baseline, anchor binding gate#2708

Merged

os-zhuang merged 3 commits into

mainfrom

claude/adr-0090-p2-audience-anchors

Jul 9, 2026

Commits on Jul 9, 2026

feat(security)!: ADR-0090 P2 — everyone/guest audience anchors, additive baseline, anchor binding gate
claude
committed
chore(spec): regenerate API-surface snapshot for the P2 audience-anchor exports (6 additions, 0 breaking)
claude
committed
fix(security): enforce the RLS `positions` applicability domain; scope the #1985 owner policies to org_member
claude
committed