InventoryAuthorization

Who changes the stock. A stock belongs to the tenant: every caller reads it, and the inventoryAuthorizer keeps the buyers, owner-level callers, from changing it, as the catalog keeps them from changing a product. An employee, a tenant-level caller, receives stock: in development, a Wow-User without a Wow-Owner; behind the CoSec gateway, a principal of the role employee. The order process's reservations reach the stock on the context's command topic, outside admission, and a service's call on the internal port is a service identity's: the authorizer refuses neither.