Bootstrap geth Rust workspace

docs/adr/0003-resource-model.md

@@ -0,0 +1,18 @@
+# ADR 0003: Resource Model
+
+## Status
+
+Accepted.
+
+## Decision
+
+Everything meaningful is modeled as a resource. Initial kinds are `db`, `kv`,
+`pipe`, `document`, `pubsub`, `cas`, and `ssh-proxy`.
+
+Resources have capability-scoped authorization. Roles may exist as bundles, but
+capabilities are the underlying permission unit.
+
+## Consequences
+
+Resource APIs, auth logs, secrets, and future replication can share one model
+without relying on global roles.