docs: OGAR der Türsteher — ActionHandler as classes, RBAC hardcoded, Rung as Flughöhe

[AdaWorldAPI]

DOCTRINE v0 — docs/ACTIONHANDLER-TURSTEHER.md

Carves the operator's pin into canon, grounded inline in shipped code (mostly
[G]):

1. ActionHandler IS OGAR classes — the shipped
   lance-graph-ogar::OgarActionProvider (per-class const ActionDef
   manifests; auth_store 0x0B01 / auth_zitadel 0x0B02 with
   effective_actions inheritance). HIRO/Bardioc dock native — they are OGAR,
   not a wrapper.
2. RBAC hardcoded — required_role is a compile-time const on the class.
   A compliance reviewer reads the grant surface off the source; no roleless
   mutating action; an override cannot silently widen access.
3. The cold path the class enforces — { RBAC · Libet do/don't · Rubikon@MUL }
   via contract::action::ActionInvocation::commit; the kgV executor is
   graph-flow-action, the outer cycle graph-flow-kanban.
4. Rung 1-9 is the Flughöhe — hot-path cognition altitude
   (ElevationLevel::from_rung calibration; Csíkszentmihályi Flow channel
   tuning), bounded by the cold-path gate it cannot lower. Altitude does not buy
   authority.
5. Containment by structure, not trust — capability-bounding via a closed
   const DO surface + an unforgeable commit gate (the move/ownership
   Firewall, ADR-022/023). "OGAR kriegt sie alle."

Pairs with HIRO-IN-CLASSES.md, HIRO-DO-ARM-LIFT.md,
CLASSID-RBAC-KEYSTONE-SPEC.md, and ada-docs
architecture/COLD_PATH_MUL_ACTIONHANDLER.md. Docs-only; append-only canon.

🤖 Generated with Claude Code

---

Generated by Claude Code

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, you can upgrade your account or add credits to your account and enable them for code reviews in your settings.