Changeset 0.8.0.1 (#43)

ROADMAP.md

@@ -154,23 +154,23 @@ White-label support and UX improvements that exploit existing infrastructure.
 The missing middle tier: scoped administration without system-admin access.
 
 **Schema**
-- [ ] `teams` table: id, name, description, created_by
-- [ ] `team_members` table: team_id, user_id, role ('admin' | 'member')
-- [ ] Add `team_id` (nullable) to: model_presets, channels, (future: notes, KBs)
-- [ ] Team admin role: scoped per-team, not system-wide
+- [x] `teams` table: id, name, description, created_by
+- [x] `team_members` table: team_id, user_id, role ('admin' | 'member')
+- [x] Add `team_id` (nullable) to: model_presets, channels, notes
+- [x] Team admin role: scoped per-team, not system-wide
       (one person can be admin of Team A, member of Team B)
 
 **Onboarding**
 - [ ] Registration approval → assign role + team(s) during approval
       (upgrade from current binary approve → assign-and-activate)
-- [ ] System admin creates teams + assigns first team admin
+- [x] System admin creates teams + assigns first team admin
 - [ ] Team admin self-manages: add/remove members, create team presets,
       manage team channels, view team usage
 
 **Private Provider Policy**
-- [ ] `is_private` flag on provider configs (marks local/self-hosted endpoints)
-- [ ] `require_private_providers` policy per team
-- [ ] Completion handler enforces policy — team members restricted to private providers
+- [x] `is_private` flag on provider configs (marks local/self-hosted endpoints)
+- [x] `require_private_providers` policy per team (via teams.settings JSONB)
+- [x] Completion handler enforces policy — team members restricted to private providers
 - [ ] Enables HIPAA/compliance posture: provable data boundary per team
 
 ## 0.8.x — Audit + Usage Tracking