# Identity Domain Boundary Rules

## Domain Owns
- Identity policy decision rules
- Token issuance decision policies
- Identity decision invariants

## Service Owns
- Use-case orchestration
- Transport adaptation

## DAL Owns
- Persistence/retrieval
- Technical translation

## BFF Owns
- Edge contract handling
- Service client adaptation

## Forbidden
- Domain references to DAL/Service/BFF
- Domain transport or persistence implementation