03-DESIGN/01-to-be/41-the-shell-and-the-accounts-environment.md

@@ -103,6 +103,10 @@ against WP2's controller before anything is published.
   The exception is a shell that refuses logins (`nologin`, `false`): the distribution does not list
   those, and the controller's own account uses one, so it need only be executable. The refusal fails
   that resource and leaves the account untouched.
+- A directory the host creates on the way to a file, a block or an archive inside an account's home
+  belongs to that account, the home itself included when the host makes it. A directory that was
+  already there keeps its owner and mode (ADR 0182). Until this, a fresh account's `~/.config` or
+  `~/.local/share` would have been created as root's.
 - Giving the shell back is reported, never fatal. A failed `usermod` on removal is named in the
   outcome and the record is dropped, because a fatal removal is exactly the wedge issue 225 is about.