Bootstrap geth Rust workspace

docs/adr/0005-bearer-resource-secrets.md

@@ -0,0 +1,18 @@
+# ADR 0005: Bearer Resource Secrets
+
+## Status
+
+Accepted.
+
+## Decision
+
+Bearer secrets may grant resource-specific capabilities. They do not create
+trusted node identity and should not normally grant trust graph mutation rights.
+
+Private resource access is modeled with resource master secret epochs. Revocation
+is approximated by rotating to a new epoch and distributing it only to remaining
+authorized devices.
+
+## Consequences
+
+Invites and temporary access can be practical without weakening node identity.