Team membership: Data, permissions, and operations
Prevents the last owner from leaving, requires two-step ownership transfer, revokes sessions and tokens on leave, and writes an audit record for every membership change.
Comments attach to a document revision, support hide versus delete, allow mentions only of users the commenter can see, bound the edit window, and record moderation actions in an audit trail.