# Thalos Domain Repository Charter

## Purpose
`thalos-domain` owns identity domain decisions and policies that are currently mixed into service application components.

## Ownership
- Identity domain ownership remains strictly inside Thalos.
- Thalos domain defines policy and token decision semantics.

## Scope
- Identity policy decision rules
- Token issuance decision policies
- Domain-level identity context evaluation

## Out of Scope
- Transport wiring (gRPC/REST)
- Persistence providers/repositories
- BFF edge concerns

## Dependency Boundary
Allowed direction:
- `blueprint-platform` -> `building-block-identity` -> `thalos-domain`

Forbidden:
- Domain references to DAL, Service, or BFF
- Dependencies on `legacy/`