People Tab

The People tab -- one record for everybody, with their lifecycle.

⛔GATED BY hr:contractors:read, WHICH IS THE WHOLE CROSS-PERSON RULE. README §11: "Let a contractor see another person's numbers" is on the do-not list, and the guarantee that enforces it already exists -- see floor_blocks/routes.py::get_contractor_numbers, which refuses any contractor asking for an id that is not their own. This route carries every person's standing, progress and open management work in one body, so it is HR-only outright: there is no "your own row" arm to fall back to, because a contractor has no business reading this list at all.

⛔AND IT IS DECLARED BEFORE /{contractor_id}. FastAPI matches in declaration order, so a literal path registered after the parameterised one is swallowed by it and answers 404 for a route that exists -- which is why /documents and /performance sit here too.