Repository navigation

feat(organizations): support many independent organizations per process - #2549

Merged

vieiralucas merged 32 commits into

mainfrom

feat/2543-multi-organization

Sep 24, 2026

Commits on Sep 24, 2026
- feat(organizations): support many independent organizations per process
  
  vieiralucas
  and
  claude
  committed
  24b3ac1
- fix(organizations): correct the responsibility-transfer and handshake gates
  
  vieiralucas
  and
  claude
  committed
  425c0a7
- fix(organizations): scope handshake duplicates and let either party end a transfer
  
  vieiralucas
  and
  claude
  committed
  945eb2c
- fix(organizations): resolve email targets against registered addresses
  
  vieiralucas
  and
  claude
  committed
  05dea1a
- fix(organizations): make transfer targets answerable and account ids unique registry-wide
  
  vieiralucas
  and
  claude
  committed
  9faf9e7
- fix(organizations): scope email resolution and render handshake parties by type
  
  vieiralucas
  and
  claude
  committed
  af6b33e
- fix(organizations): a responsibility transfer targets another organization
  
  vieiralucas
  and
  claude
  committed
  d04b7a0
- fix(organizations): record transfer targets as named, resolve the caller instead
  
  vieiralucas
  and
  claude
  committed
  1563a1e
- refactor(organizations): one predicate decides who a handshake target is
  
  vieiralucas
  and
  claude
  committed
  1546b7d
- fix(organizations): compare organizations, not management accounts, on transfer targets
  
  vieiralucas
  and
  claude
  committed
  807c323
- fix(organizations): close the email spelling of a self-targeted transfer
  
  vieiralucas
  and
  claude
  committed
  981cdff
- fix(organizations): emit a resolvable transfer target id, drop the inbound membership gate
  
  vieiralucas
  and
  claude
  committed
  a028766
- fix(organizations): a reserved account id is claimed, and accept enrolls who it proved
  
  vieiralucas
  and
  claude
  committed
  a93c0bd
- fix(organizations): honour the reservation window on every enrolling path
  
  vieiralucas
  and
  claude
  committed
  4c0a07f
- fix(organizations): prefer the registered address, and scope effective-policy targets
  
  vieiralucas
  and
  claude
  committed
  7af88f3
- fix(organizations): an address names exactly one account
  
  vieiralucas
  and
  claude
  committed
  27790fc
- docs(organizations): describe the resolution rules the code actually applies
  
  vieiralucas
  and
  claude
  committed
  6c46a64
- fix(organizations): give the GovCloud mirror its own address, agree on the transfer target
  
  vieiralucas
  and
  claude
  committed
  2121178
- fix(organizations): resolve the transfer target before judging it, and scope the id it returns
  
  vieiralucas
  and
  claude
  committed
  dfbefc1
- fix(organizations): enforce unique account addresses, restore the modeled not-in-use errors
  
  vieiralucas
  and
  claude
  committed
  38ad9a8
- fix(organizations): authorize before validating, and settle the transfer-target rule
  
  vieiralucas
  and
  claude
  committed
  60154a9
- fix(organizations): fail a duplicate address the way AWS does, and release it on close
  
  vieiralucas
  and
  claude
  committed
  0453037
- fix(organizations): first caller wins a contested address, closed accounts release theirs
  
  vieiralucas
  and
  claude
  committed
  b13d7e3
- fix(organizations): reserve a synthetic address for the id it spells
  
  vieiralucas
  and
  claude
  committed
  579c93c
- fix(organizations): apply the address rules on the CloudFormation paths too
  
  vieiralucas
  and
  claude
  committed
  9104ea4
- fix(organizations): read an ACCOUNT transfer target as an id, authorize the CFN path first
  
  vieiralucas
  and
  claude
  committed
  7bd5dfc
- fix(organizations): check the handshake's state before its membership gates
  
  vieiralucas
  and
  claude
  committed
  6b54e35
- fix(organizations): party gate before state, and list the handshakes an account sent
  
  vieiralucas
  and
  claude
  committed
  507163b
- fix(organizations): accept TRANSFER_RESPONSIBILITY as a handshake filter, name the caller in its own transfer
  
  vieiralucas
  and
  claude
  committed
  7983889
- fix(organizations): open org reads to delegated administrators, and complete the transfer handshake
  
  vieiralucas
  and
  claude
  committed
  3c60589
- fix(organizations): end a delegated-administrator grant with the membership it was granted to
  
  vieiralucas
  and
  claude
  committed
  af5e157
- fix(organizations): name the account in AccountNotRegisteredException
  
  vieiralucas
  and
  claude
  committed
  7733614

Navigation Menu

Repository navigation

feat(organizations): support many independent organizations per process - #2549

feat(organizations): support many independent organizations per process#2549
vieiralucas merged 32 commits into
mainfrom
feat/2543-multi-organization

Commits on Sep 24, 2026

feat(organizations): support many independent organizations per process

fix(organizations): correct the responsibility-transfer and handshake gates

fix(organizations): scope handshake duplicates and let either party end a transfer

fix(organizations): resolve email targets against registered addresses

fix(organizations): make transfer targets answerable and account ids unique registry-wide

fix(organizations): scope email resolution and render handshake parties by type

fix(organizations): a responsibility transfer targets another organization

fix(organizations): record transfer targets as named, resolve the caller instead

refactor(organizations): one predicate decides who a handshake target is

fix(organizations): compare organizations, not management accounts, on transfer targets

fix(organizations): close the email spelling of a self-targeted transfer

fix(organizations): emit a resolvable transfer target id, drop the inbound membership gate

fix(organizations): a reserved account id is claimed, and accept enrolls who it proved

fix(organizations): honour the reservation window on every enrolling path

fix(organizations): prefer the registered address, and scope effective-policy targets

fix(organizations): an address names exactly one account

docs(organizations): describe the resolution rules the code actually applies

fix(organizations): give the GovCloud mirror its own address, agree on the transfer target

fix(organizations): resolve the transfer target before judging it, and scope the id it returns

fix(organizations): enforce unique account addresses, restore the modeled not-in-use errors

fix(organizations): authorize before validating, and settle the transfer-target rule

fix(organizations): fail a duplicate address the way AWS does, and release it on close

fix(organizations): first caller wins a contested address, closed accounts release theirs

fix(organizations): reserve a synthetic address for the id it spells

fix(organizations): apply the address rules on the CloudFormation paths too

fix(organizations): read an ACCOUNT transfer target as an id, authorize the CFN path first

fix(organizations): check the handshake's state before its membership gates

fix(organizations): party gate before state, and list the handshakes an account sent

fix(organizations): accept TRANSFER_RESPONSIBILITY as a handshake filter, name the caller in its own transfer

fix(organizations): open org reads to delegated administrators, and complete the transfer handshake

fix(organizations): end a delegated-administrator grant with the membership it was granted to

fix(organizations): name the account in AccountNotRegisteredException