# ADR 0003: Resource Model

## Status

Accepted.

## Decision

Everything meaningful is modeled as a resource. Initial kinds are `db`, `kv`,
`pipe`, `document`, `pubsub`, `cas`, and `ssh-proxy`.

Resources have capability-scoped authorization. Roles may exist as bundles, but
capabilities are the underlying permission unit.

## Consequences

Resource APIs, auth logs, secrets, and future replication can share one model
without relying on global roles.