refac: debt on role backend

features/article_title_rules.qa.md

@@ -1,5 +1,7 @@
 # QA procedure: article_title_rules
 
+> Superseded in part by roles_permissions_content_scope: the article routes are gated by the content.* permissions of the caller's role (content.create, content.update, content.delete and content.publish; a refusal is 403 "missing_permission" with the header X-Missing-Permission), and content.read decides which drafts show: every draft at all, only the caller's own drafts at own, none otherwise. A draft the caller may not read answers 404 "Article not found", and a role that cannot be resolved is treated as holding no permission.
+
 Package: `test` (black-box, alongside `article_test.go` / `use_case_baseline_test.go` /
 `not_found_errors_test.go` / the hasher-domain-interface tests).