Members and governance
The critical departure from consumer group apps: the member is a business, not a person. Someone leaving a company does not remove their employer from the network, and that single fact is what makes the permission model two layers deep instead of one.
Suspension before removal. Removal is loud, permanent and needs a new invitation to undo. Suspension
makes a member read-only and stops new ordering, which is usually what an admin actually wants.
Members
| Business | Role | Joined | Sharing policy | Action |
|---|
A network must always have exactly one owner. If the owning business leaves, ownership passes
to the longest-tenured admin. If there is none, the network is archived after a 14-day grace period during
which any member may claim it.
Why roles sit on the business
Layer 1 · the networkGrants a role to a member business — owner, admin, or
member. This is what the network's governance actually operates on.
Layer 2 · the businessThat business's own admin decides which of their staff may
exercise each capability.
The pay-off: staff turnover never destabilises network governance. A departing employee changes nothing at layer 1.
What survives a departure
- Open orders run to completion under their original terms.
- Order history is retained by both parties — it is a financial record, not a convenience.
- Published listings disappear immediately; nothing new can be ordered.
- Re-joining needs a fresh invitation or request. There is no undo.
A policy change never reaches backwards into orders already placed. The same principle governs departure.
Audit log
2026‑09‑24 · Harbor Parts Ltd joined via invite link · approved by Ridgeline Supply
2026‑09‑18 · Summit Distribution set a sharing policy · scope: selected items
2026‑09‑11 · Network created · visibility: private
Membership, role, policy and order-state changes are all logged immutably with actor, timestamp and prior value. Illustrative placeholder data, in-memory state.