docs: define calendar-aware analytics model
This commit is contained in:
@@ -8,6 +8,7 @@ For every Go-related task, always invoke and follow the `golang-how-to` skill, t
|
||||
|
||||
## Product invariants
|
||||
|
||||
- Use the canonical domain terms in `CONTEXT.md`; update that glossary when a term's meaning is approved, without adding implementation details to it.
|
||||
- The backend is the authority for authentication, authorization, tenant isolation, metric definitions, and data provenance.
|
||||
- Every merchant-scoped query derives merchant identity from the authenticated server-side session; never trust a client-supplied merchant identifier as authorization.
|
||||
- Cross-merchant results are anonymized aggregates only. Exclude the active merchant and suppress the benchmark unless at least 10 other merchants and 1,000 combined peer sessions contribute to the approved cohort/window.
|
||||
|
||||
Reference in New Issue
Block a user