[DECIDED] Parent auth: Google for case/account; guest browse OK (#280/#281) #337

[DECIDED] Parent auth model — 2026-10-13

Decision owner: Jarvis (for CEO Chan Hau Yui)
Status: DECIDED — leave open until Account epic #280 / #281 implement; then close as completed.

Ruling (Option A — Hybrid)

Rationale (CEO)

• OPS needs a durable parent identity for matching, WhatsApp handoff, and Case system of record (Case becomes the system of record #201).
• Google is already the Account epic identity — avoids parallel guest+account thrash.
• Discovery stays frictionless (no login wall to look).

Enforce in

• P1 — When an account is required (Google for case create; guest browse) #281 P1 — source of truth for “when account required”
• Epic: Account owns the card (P1–P14) #280 Account epic — build order unchanged; this decision locks parent side
• Tutor case board + apply-to-staff (parent Google per #337; guest submit not primary) #81 — keep tutor case board + apply-to-staff; do not treat guest case-submit as primary
• Preview as Parent sandbox (OAuth owned by #280) #104 — Preview sandbox only; OAuth is Epic: Account owns the card (P1–P14) #280
• Polish Help + Guides: fix broken copy, IA, content, and visuals (Help/Guide/Playbook) #333 — Help/Guide copy must match (Google to request/manage; guest browse OK)

Acceptance criteria

• Decision recorded (2026-10-13) with Option A hybrid as above
• P1 — When an account is required (Google for case create; guest browse) #281 / Epic: Account owns the card (P1–P14) #280 implement Google-before-case-create (and other product actions)
• Tutor case board + apply-to-staff (parent Google per #337; guest submit not primary) #81 acceptance no longer requires guest-primary case submit
• Guide/Help (Polish Help + Guides: fix broken copy, IA, content, and visuals (Help/Guide/Playbook) #333) one-pager reflects the same rule
• Close this issue when P1 — When an account is required (Google for case create; guest browse) #281 acceptance for parent case-create is met