Ownership transfer
Last updated:
Ownership transfer is a dedicated organization operation. Ordinary role mutation must not reproduce or bypass it.
Warning
The public contract is established, but atomic ownership-transfer implementation and readiness verification remain in progress in WS-005.
Target transition
A successful TransferOwnershipAsync operation:
- validates that the acting membership is a current Owner;
- validates that the target is an eligible current membership in the same organization;
- checks the expected organization version;
- promotes the selected membership to Owner;
- demotes the acting Owner to Administrator;
- preserves any other existing Owners;
- records the supported lifecycle facts in the same transaction.
The result contains the committed previous-owner snapshot, new-owner snapshot, and new organization version.
Invariants
- Only a current Owner may initiate transfer.
- The target must belong to the explicit organization.
- The organization never commits a state without an Owner.
- Stale organization versions return
concurrency_conflict. - Cross-organization targets use not-found-equivalent behavior.
- Active context and authorization must reflect committed roles without reauthentication.