vibe-domainlisted

# Permissions, data & business rules Read [the shared workflow](../../references/workflow.md) once per task, then the one recipe matching the requested operation and boundary. Do not load every recipe. The user's request controls scope and whether edits are allowed. For OAuth/OIDC verification, select the session check. For a requested authentication fix, use Auth Permissions Polish and apply the relevant protocol checks during verification. ## Recipes | Recipe | Operation | |---|---| | [Auth Permissions Audit](references/auth-permissions-audit.md) | audit | | [Auth Permissions Polish](references/auth-permissions-polish.md) | implement | | [Billing Entitlements Audit](references/billing-entitlements-audit.md) | audit | | [Billing Entitlements Polish](references/billing-entitlements-polish.md) | implement | | [Data Model Audit](references/data-model-audit.md) | audit | | [Data Model Polish](references/data-model-polish.md) | implement | | [Data Pipeline & Quality Audit](references/data-pipeline-quality-audit.md) | audit | | [Data Pipeline & Quality Polish](references/data-pipeline-quality-polish.md) | implement | | [Experiment Design Audit](references/experiment-design-audit.md) | audit | | [Experiment Design Polish](references/experiment-design-polish.md) | implement | | [Multi Tenant Isolation Audit](references/multi-tenant-isolation-audit.md) | audit | | [Multi Tenant Isolation Polish](references/multi-tenant-isolation-polish.md) | implement | | [OAuth OIDC Session Chec