ADR 011 Folder Authorization Recovery

• ID: ADR-011
• Status: Accepted
• Date: 2026-08-25
• Date meaning: Original dated decision/source section; extraction recorded 2026-10-02.
• Implementation: No implementation information was recorded in the source status; tickets own progress.
• Approval qualification: Recorded accepted decision; dated delivery conditions are historical, not new execution authorization.

Context

A project folder authorization must establish current access before resolving or dismissing a review item.

Decision

An owner-triggered Needs Review Resolve or Dismiss action requires a currently resolved, active security-scoped bookmark for that project. Stored paths alone do not authorize the action.

Reauthorizing the same canonical persisted root and associating the first root for a rootless legacy project are distinct owner actions. First-root association requires project-named owner confirmation and a globally unowned canonical root. Both actions are app-owned, bounded, and audited; failed, stale, denied, or mismatched authorization fails closed and preserves existing history.