security(dci): stop DCI Administrator group from granting system admin#327

Draft

gonzalesedwin1123 wants to merge 6 commits into

19.0from

security-dci-admin-group-implies-system

Commits on Jul 23, 2026

test(security): pin that DCI admin group must not grant system admin
gonzalesedwin1123
committed
security(dci): stop DCI Administrator group from granting system admin
gonzalesedwin1123
committed
style: apply ruff-format to DCI admin group test
gonzalesedwin1123
committed
docs(spp_dci): regenerate README from fragments (CI oca-gen output)
gonzalesedwin1123
committed
security(dci): refresh stale group comment in migration; pin its warning
gonzalesedwin1123
committed
security(dci): refresh comment idempotently; pin migration idempotence
gonzalesedwin1123
committed