Team membership: Data, permissions, and operations

Prevents the last owner from leaving, requires two-step ownership transfer, revokes sessions and tokens on leave, and writes an audit record for every membership change.

Published Sep 12, 2026