Team & access governance
Role- and location-scoped access proposals with independent review and an immutable record. Approval never silently changes runtime membership.
No invitation delivery or automatic role mutation. An approved record requires a separate authenticated fulfilment step.