# Building Block Identity Repository Charter

## Purpose
`building-block-identity` is a contracts-only building block repository for transport-neutral identity capability contracts.

## Ownership
- Identity schema ownership remains with Thalos.
- Contract governance is approved by Thalos maintainers.
- Consumers may depend on contracts only; no identity behavior is hosted here.

## Scope
- Token issuance contracts
- Policy evaluation contracts
- Policy context contracts
- Session refresh contracts (if approved by governance review)

## Out of Scope
- Identity business logic
- Runtime adapters
- Persistence concerns
- BFF or Service orchestration

## Dependency Boundary
Allowed direction:
- `blueprint-platform` -> `building-block-identity`

Forbidden:
- References to DAL, Service, or BFF layers
- Any dependency on `legacy/`

## Consumer Boundary
- Thalos repositories consume these contracts as producer/owner.
- Non-Thalos repositories may consume contracts but must not own identity abstractions.