Part of production design QA PAR-457 (parent links maintained there; workspace subtasks disabled). Observed /onboarding?w=design-qa-20261018&step=invite at 390×844. Role defaults to Admin; available roles are Admin, Contributor, Viewer. Copy says 'People you invite can triage, comment and vote' without explaining administrative access. Any shareable link also uses this role. First-time owners can unintentionally grant broad administration to their community. Expected: Contributor default, explain selected role capabilities, and explicitly acknowledge administrative access before creating Admin invite links. Reproduce: fresh account → create workspace → skip Discord/GitHub → Invite your team.
Implemented in the dependent QA stack: https://github.com/ParadauxIO/taskl.ie/pull/88
Combined verification passed: full API suite (1,306 tests), web lint and TypeScript, unit suite (1,211 passed; one existing skip), 483 Chromium story checks, and the production Next.js/CSS build. Desktop/mobile component evidence and a flow diagram are attached where applicable; server-rendered screenshot gaps and GitHub rollout prerequisites are explicit in the PR.
Awaiting review and merge; production application code has not been deployed by this task.