Context resources
Resolve identity, teams, and assignable Users before acting.
epismo://context/current_user
epismo://context/teams
epismo://context/usersRead current_user at the start of a consequential interaction to verify authenticated User and workspace context. Read teams before using Team IDs as private ACL principals. Read users before assigning a Case or Task.
Teams and Users can both appear in ACLs, but assignments accept Users only. Assignment does not grant access, so make sure the selected User is already in the Case ACL. Do not invent IDs from names or email addresses when a context resource can resolve the available identities.
Resources are contextual reads, not a cache contract. Re-read them when the OAuth context changes, after a workspace switch, or before an operation where stale membership would create an incorrect ACL or assignment.