AUTH AND IDENTITY BOUNDARY

Current scope: Gest

Category: 10_normative | Version: v1.0.0

Owner: DOCUMENT_CUSTODIAN | Review cycle: 90 days

Approval Authority: GOVERNANCE_ADMIN

Read-only Documentation Portal. Editing and mutation endpoints are disabled.

METADATA INCOMPLETE: Document ID, Version, Owner Role, Last Review Date, Next Review Date, Change Log

Auth And Identity Boundary

Status: ACTIVE
Audit Date: 2026-03-16
Cleanup Sprint: 01

VERIFIED: services/svc-auth is the current canonical owner of auth/session/account runtime for the public platform path.
VERIFIED: packages/identity-infra is the current canonical owner of stakeholder onboarding persistence and reviewer workflow implementation.
VERIFIED: services/api is the public façade for both, but it exposes these capabilities unevenly.
VERIFIED: gateway reviewer actions for stakeholder applications are currently stubbed even though backend implementations exist.
UNVERIFIED: long-term canonical consolidation target between svc-auth and identity-infra.

Owner: services/svc-auth State: REAL