01
Roles have scope
Membership will use explicit roles and server-side permissions rather than hidden front-end controls.

Stellar X treats organizations as governed institutions with roles, projects, risk boundaries, and selective public summaries.
Organization records are pending
The public layer will show only approved activity summaries. Membership detail, internal budgets, and sensitive risk evidence are permissioned.
01
Membership will use explicit roles and server-side permissions rather than hidden front-end controls.
02
Project state changes, budgets, and outcomes will remain attributable to their recorded source.
03
Restricted actions and incidents will show a reason, owner, status, and audit trail.
Public product boundary
Stellar X makes an explicit distinction between a prepared surface and a connected product capability.
Public summaries can be read without exposing member records
Financial data remains private by default
Risk interventions require a documented authority path