Complete lifecycle for: - Web Stack Decision → merged to main - Profiles MVP → merged to main - Resources MVP → merged to main All proposals now marked as archived.
1.3 KiB
1.3 KiB
Proposal: Profiles MVP
Status: archived Archived: 2025-11-17 Applied: Merged to main via claude/profiles-mvp-2025-11-17 Authors: Identity Team Owners: Identity Lead, Compliance Lead Created: 2025-11-17 Scope: spec Related: openspec/specs/feature-profiles.md
Summary
- Deliver full profile management with privacy controls, optional pseudonyms, pronouns, avatar, and consent-driven visibility.
Motivation
- Empower members to represent themselves safely and control visibility of sensitive fields.
Requirements
- Accessibility: large text, screen reader labels, keyboard/focus parity.
- Privacy: field-level data class tags; default-private for sensitive fields; consent registry.
- Media: avatar upload with safe processing and size constraints.
API
- Profiles CRUD; consent endpoints; media upload policy and signed URLs.
Data Model
- Profile fields with Public/PII/PHI tags; retention policy; soft-delete behavior.
Test Plan
- Unit/integration for API; a11y checks; GDPR export/delete flows.
Rollout
- Feature flag; migration for existing members; help content.
Acceptance Criteria
- GDPR export/delete verified; HIPAA constraints respected; a11y parity on all profile screens.
Slash Commands
/review areas=mobile,web,backend,accessibility,compliance,security/apply spec=openspec/specs/feature-profiles.md/archive link=<PR>