Plan Y — Field Ownership + Authz Extension
**Child plan under &44 (Plan S — Multi-Jurisdiction Foundation, Phase 3).** ## Summary The field-ownership program from [ADR-037](https://gitlab.com/gadhs/application/ccwis/craig/-/blob/main/docs/modules/ROOT/pages/adrs/adr-037-field-ownership-authz.adoc) + [Contract 5](https://gitlab.com/gadhs/application/ccwis/craig/-/blob/main/docs/modules/ROOT/pages/design/five-contracts.adoc). Field ownership is intrinsically **cross-tenant** (state agency vs external provider), so a faithful enforced edit surface needs the external-provider second tenant — the **Phase-11 CWCA provider portal**, its real first consumer. Plan Y is therefore **re-scoped** to the one part that is real, reusable, and consumer-independent now: - **Plan Y (this epic) = the `craig-authz` field-permission *evaluation* capability** (ADR-037 §2/§3): a `FieldPermission { Read, Write, Propose, None }` enum + a new `resolve_field_permission` eval path (sibling to `check`/`auto_scope_list`) + `parse_field_permission_output`, proven against a fixture ruleset. - **The surface-bound *application* (ADR-037 §4–§7)** — the `BundleContribution` field-ownership axis, per-surface ownership tables + boot-validate, `pending_edits_<surface>` + propose/accept/reject + field audit, the BFF lock-icon + Studio — is **consumer-driven** and **sequenced to Phase 11** (the CWCA provider portal, which calls `resolve_field_permission` unchanged). Building it now would be a fig leaf or throwaway. ADR-037 is satisfied **incrementally**: Plan Y delivers §2/§3, Phase 11 delivers §4–§7. The umbrella plan is the sequencing authority (ADR-037 is unedited). **This epic stays OPEN past Plan Y** as the durable tracker for the deferred Phase-11 §4–§7 application (a tracking issue is filed here at Y2). ## Plan body [docs/modules/ROOT/pages/plans/field-ownership-authz.adoc](https://gitlab.com/gadhs/application/ccwis/craig/-/blob/main/docs/modules/ROOT/pages/plans/field-ownership-authz.adoc) ## Children - [x] #631 feat: Y1 — craig-authz field-permission evaluation capability (FieldPermission) (weight: 3) - [ ] #632 chore: Y2 — Plan Y completion audit + archive + Phase-11 hand-off (weight: 2)
epic