Tenant-safe delegated authorization kernel for Go SaaS.
- Immutable validated permission catalog
- own/workspace/tenant scope evaluation with deterministic reasons
- Delegated administration with scope coverage and grant-cycle prevention
- One-time tenant bootstrap and last-administrator protection
- Immutable role versions and mutation audit
- In-memory and PostgreSQL adapters
- PostgreSQL RLS migrations with tested up/down paths
- Tenant export and purge with permanent tombstones