feat(device-core): expose safe project control views

2026-08-10 20:49:10 +03:00
parent f5d7916338
commit 1d1e9a96b3
3 changed files with 583 additions and 4 deletions
@@ -50,6 +50,10 @@ The standalone Hub application `Device Core` / `Device Manager` is the human
 control-plane shell. Its server-owned BFF calls the disabled-by-default
 management and query API in `device-control-core`; browsers never receive the
 Core bearer token and never author actor, role, group or owner-scope headers.
+The authorized project workspace exposes only bounded metadata for catalog,
+routes/sessions, bindings, configuration state, command state, audit and access;
+raw audit/configuration payloads, command parameters/transport refs, external
+approval proofs, credential refs and restricted identifier digests remain in Core.
 Foundry remains a downstream consumer for project-approved device data and is
 not the device registry or administration boundary.