feat(openspec): propose Profiles MVP

openspec/changes/2025-11-17-profiles-mvp/proposal.md

@@ -0,0 +1,40 @@
+# Proposal: Profiles MVP
+
+Status: draft
+Authors: Identity Team
+Owners: Identity Lead, Compliance Lead
+Created: 2025-11-17
+Scope: spec
+Related: openspec/specs/feature-profiles.md
+
+Summary
+- Deliver full profile management with privacy controls, optional pseudonyms, pronouns, avatar, and consent-driven visibility.
+
+Motivation
+- Empower members to represent themselves safely and control visibility of sensitive fields.
+
+Requirements
+- Accessibility: large text, screen reader labels, keyboard/focus parity.
+- Privacy: field-level data class tags; default-private for sensitive fields; consent registry.
+- Media: avatar upload with safe processing and size constraints.
+
+API
+- Profiles CRUD; consent endpoints; media upload policy and signed URLs.
+
+Data Model
+- Profile fields with Public/PII/PHI tags; retention policy; soft-delete behavior.
+
+Test Plan
+- Unit/integration for API; a11y checks; GDPR export/delete flows.
+
+Rollout
+- Feature flag; migration for existing members; help content.
+
+Acceptance Criteria
+- GDPR export/delete verified; HIPAA constraints respected; a11y parity on all profile screens.
+
+Slash Commands
+- `/review areas=mobile,web,backend,accessibility,compliance,security`
+- `/apply spec=openspec/specs/feature-profiles.md`
+- `/archive link=<PR>`
+