Global secured search first-class module

Classification

Global secured search is a reusable first-class BuildWithHQ runtime module. The current Capability/Support handbook records the Phase 11 first-class module set as completed implementation evidence.

Shared first-class module contract

• Use universal RecordId conventions wherever the module represents business objects.
• Enforce SaaS/AppAccount/DataRole/location/field permissions through canonical secured procedures/services.
• Participate in record relations, activity/history, favorites, dynamic fields, search, workflows, and AI/MCP only where those capabilities are applicable to the module.
• Browser or AI callers use canonical module APIs; they do not perform direct table DML.
• AI/MCP access never widens the caller’s normal authorization envelope.

Module purpose

Reusable cross-module search that returns only records permitted by the active SaaS, tenant, role, location, and other security constraints.

Directory purpose

Keep this module’s architecture, API contracts, stored-procedure references, UI/runtime behavior, tests, support troubleshooting, MCP tools, and future module-specific knowledge together in this directory.