Organizations & members
Org creation provisions roles + seal + owner
Section titled “Org creation provisions roles + seal + owner”When an organization is created (CreateOrganizationCommandHandler), the handler:
- Seeds three preset roles with
axowl.*permission templates —ORG_OWNER(axowl.*),ORG_ADMIN,ORG_MEMBER(CreateDefaultRoles,:446). See Roles & permissions. - Assigns
ORG_OWNERto the owner’sConnectedId(:231). - For corporate onboarding, also assigns
ORG_ADMINto the author (a temporary admin who runs the setup wizard; their membership is deactivated at handoff but the role row is preserved for provenance) (:253). - For independent orgs, generates an org master seal and an RSA token-signing key (
:293).
Org types
Section titled “Org types”SoleProprietorship, Corporation, SPC — independent vs. dependent (a dependent org uses its parent’s seal). Corporations/SPCs add a REPRESENTATIVE_DIRECTOR role.
The member lifecycle runs invited → pending → active → suspended/revoked.