From cf26b3851dd21a48bd4547d3895764f63cd31e3a Mon Sep 17 00:00:00 2001 From: admin Date: Mon, 17 Nov 2025 23:47:31 +0000 Subject: [PATCH] feat(openspec): propose Profiles MVP --- .../2025-11-17-profiles-mvp/proposal.md | 40 +++++++++++++++++++ 1 file changed, 40 insertions(+) create mode 100644 openspec/changes/2025-11-17-profiles-mvp/proposal.md diff --git a/openspec/changes/2025-11-17-profiles-mvp/proposal.md b/openspec/changes/2025-11-17-profiles-mvp/proposal.md new file mode 100644 index 0000000..3867228 --- /dev/null +++ b/openspec/changes/2025-11-17-profiles-mvp/proposal.md @@ -0,0 +1,40 @@ +# Proposal: Profiles MVP + +Status: draft +Authors: Identity Team +Owners: Identity Lead, Compliance Lead +Created: 2025-11-17 +Scope: spec +Related: openspec/specs/feature-profiles.md + +Summary +- Deliver full profile management with privacy controls, optional pseudonyms, pronouns, avatar, and consent-driven visibility. + +Motivation +- Empower members to represent themselves safely and control visibility of sensitive fields. + +Requirements +- Accessibility: large text, screen reader labels, keyboard/focus parity. +- Privacy: field-level data class tags; default-private for sensitive fields; consent registry. +- Media: avatar upload with safe processing and size constraints. + +API +- Profiles CRUD; consent endpoints; media upload policy and signed URLs. + +Data Model +- Profile fields with Public/PII/PHI tags; retention policy; soft-delete behavior. + +Test Plan +- Unit/integration for API; a11y checks; GDPR export/delete flows. + +Rollout +- Feature flag; migration for existing members; help content. + +Acceptance Criteria +- GDPR export/delete verified; HIPAA constraints respected; a11y parity on all profile screens. + +Slash Commands +- `/review areas=mobile,web,backend,accessibility,compliance,security` +- `/apply spec=openspec/specs/feature-profiles.md` +- `/archive link=` +