Read-only first

Context

Harbor must be useful before it has users, sessions, or permissions.

Decision

Ship read-only dataset records first and add writes later.

Why

Reads can be public and reproducible. Writes need the authentication specification first.

Consequences

The data model has no mutation paths yet, and the roadmap sequences writes after authentication.

Alternatives

Building authentication and writes together was rejected as a larger first release.