Switched from referencegrant the ligther parentRef

README.md

@@ -11,19 +11,16 @@ open questions it used to carry are now resolved decisions there (§2).
 
 ### terdutServers
 Creates a server — Deployment, Service, database wiring, bootstrap, operator
-credentials. See DESIGN.md §4.1.
+credentials, and `allowedTeams` consent for cross-namespace teams. See
+DESIGN.md §4.1, §4.6.
 
 ### terdutTeams
   - team name
   - oidc groups
   - `serverRef` — explicit reference to its `TerdutServer`, may be in a
     different namespace (one team owns the server, others self-service a
-    team against it), gated by a `TerdutServerReferenceGrant` in the
-    server's namespace (DESIGN.md §2, §4.2, §4.6)
-
-### terdutServerReferenceGrants
-  - lives in the `TerdutServer`'s namespace; lists which other namespaces'
-    `TerdutTeam` objects may reference it (DESIGN.md §4.6)
+    team against it), gated by that `TerdutServer`'s own `allowedTeams`
+    field (DESIGN.md §2, §4.1, §4.2, §4.6)
 
 ### terdutEscalationrules
   - rule