# Data Schema and Access
Status: DRAFT | Owner: [name] | Reviewed: [date]
Architecture revision: [id] | Canonical schema/migrations: [paths or none]

## Data inventory
- Entities, purposes and sensitivity:
- If no persistence: state why, including external form/analytics storage if any.

## Entities
| Entity.field | Type | Nullable/default | Constraints | Purpose |
| --- | --- | --- | --- | --- |
| [entity.field] | [type] | [rule] | [constraint] | [purpose] |

## Relationships and query patterns
- Cardinality and foreign keys:
- Indexes and the queries they support:

## Access matrix
| Resource | Actor | Read | Create | Update | Delete | Enforcement/test |
| --- | --- | --- | --- | --- | --- | --- |
| [resource] | [role] | [rule] | [rule] | [rule] | [rule] | [path/test] |

## Validation and lifecycle
- Server validation / database constraints:
- Ownership assignment:
- Retention, deletion and export:
- Logs and sensitive fields:

## Migration and verification
- Proposed change and affected existing data:
- Synthetic fixtures, including denied access:
- Rollout, compatibility and rollback:
- Unresolved decisions and owner:

## Source excerpts (optional)
[Small explanatory excerpt with source path and revision; not a second schema]