Operating model
Request, dispatch, evidence, review, and billing in one controlled flow
Every state transition is authorized and recorded against a tenant, actor, request, and timestamp.
Production controls
Customer, provider, and administrative data is served only after server-side tenant and permission checks.
Payments, uploads, notifications, and audit events fail closed when a required production binding is unavailable.