Single sign-on via Microsoft Entra.
Members of the firm directory only.
ComplianceAppend-only audit ledger · CSRF on every server action · evidence stored in MinIO/Blob
Source of recordSmokeball when available · local-first when not. Reconciled at the boundary.
Tier-2 horizon1 July 2026 cliff. KYC, training log, AUSTRAC pack live now.