Hello team!
The current document schema includes canReadByResident, indicating that a resident may read the document. However, if the resident has not yet been verified, sharing could expose sensitive data to a malicious actor.
Could we add an additional flag—e.g., canReadByVerifiedResidentOnly (name up for discussion)—so that a document is readable only by residents who have completed verification? This distinction would allow my project to handle access control more safely and accurately.
Thanks for considering this enhancement!