Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

ADR 0135: Q-0099: invited users change their own password through a human-only self-service operation (current and new password), added in a standalone contract PR during M4; no must_change_password flag yet

  • Status: Accepted
  • Date: 2026-11-04
  • Ledger id: D-0135
  • Tags: contracts, users, m4
  • Supersedes: none
  • Superseded by: none
  • Related: none

Context

The maintainer accepted the recommendation on 2026-11-04. M4 is the first general release, and an invited user who can never rotate the password the owner handed over is a security gap.

Decision

Q-0099: invited users change their own password through a human-only self-service operation (current and new password), added in a standalone contract PR during M4; no must_change_password flag yet.

Some wording was changed for the public repository.

Consequences

  • This decision is binding for all contributors and agents. Changing it requires a new ADR approved by the maintainer (see ADR 0036).

Generated from decision D-0135 in the project decision ledger. Do not edit by hand; changes go through a new decision.