2 Commits

Author	SHA1	Message	Date
Edwin van den Houdt	e82309786d	style: format frontend, docs and skills with prettier; add .prettierignore ... One-time prettier --write so the new format:check CI gate starts green. .prettierignore excludes generated (api-client.ts, documentation.json), vendored (public/cibg-huisstijl), and backend (dotnet format owns it). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-03 13:39:31 +02:00
Edwin van den Houdt	7887355ca3	docs(prd): add PRD-0002 — attribute-based access control (ABAC) ... Specifies fine-grained, app-owned access control layered on the AD roles: capability gating, data-scoping, field/PII-level, and step-up/SoD. Backend-authoritative (per ADR-0001), UI mirrors decisions; extends ADR-0002. Privacy-by-design: data-minimized decision DTOs, server-side PII redaction, audit, deny-by-default. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-02 12:33:12 +02:00