-- A person who may call the mesh's tools from a workstation.
--
-- novox/hq design 25 §7. Everything else that reaches the bus is a machine or a module running on
-- one; this is the exception the mesh has always had informally — somebody at a terminal — and never
-- recorded. Until now "the operator" meant whoever held the keys, which is a role and not a record,
-- so nothing could say who may call what.
--
-- **The authority is a list of tools and nothing else.** A person is not a module: they hold no seat,
-- nothing is addressed to them, nothing is delivered to them, and they have no consumer to
-- acknowledge. What they have is permission to ask. That is why there is no scope column and no node
-- column — a person is not on a machine.
create table person (
    name    text        primary key,
    -- The tools this person may invoke, each `<module>.<tool>`, or the single entry `*` for an
    -- administrator. Stored as given: the permission is derived from it at every composition, so a
    -- normalised form here would be a second opinion about authority (novox/hq ADR 0043).
    invokes text[]      not null default '{}',
    created timestamptz not null default now()
);