Implement authorization-fenced web workflows

This commit is contained in:
ms2k 2026-07-18 01:49:00 +09:00
commit 267665bb35

View file

@ -101,6 +101,11 @@ unauthorized, absent, and never-committed results are not exposed. The hard
delete endpoint returns the durable deletion resource established by the
architecture.
Exact member access returns a non-cacheable time-limited URL after current
authorization is revalidated. This JSON exchange lets a bearer-authenticated
browser deliberately navigate to the target URL without relying on an
unobservable cross-origin fetch redirect.
Before hard deletion, job reads return the complete `job` projection. Once only
the permanent minimal record remains, authorized reads and deleted-job pages use
the distinct `tombstone` projection rather than inventing discarded job fields.