The thing being acted on — enough for the authorization layer to route a check to the right table, and nothing more.
type is the storage's partition key (document, expediente, invoice), not a capability domain. Keeping them separate stops the two vocabularies from silently drifting into each other.
Changelog October 18, 2026
v6.13.0 Oct 18
🐛[x] 🐛 fix: update dates service to correctly handle datetime parsing with offsets
✨[x] 🚀 feat: update WordPress roles declaration and audit
✨[x] 🚀 feat: update examples and scripts with new WordPress API usage and comments
✨[x] 🚀 feat: update documentation and configuration files
✨[x] 🚀 feat(tests): add a, AccessCapabilitySchema and AccessResourceSchema
… and 1 more
v6.12.0 Oct 18
✨[x] 🚀 feat: add subject resolution and ownership management for sessions closes #6
📚[x] 📝 docs: align ADR-0004, ADR-0006 and guides with the shipped code
🐛[x] 🐛 fix(docs): correct AssistantService JSDoc to the real method name
✨[x] ♻️ refactor(core): move useCreateStorageSignal to infrastructure
🧪[x] 🧪 test(coverage): establish Vitest coverage baseline and reporting