Trust by design
Control is a product feature.
AI proposes. Rules decide. A human confirms.
Exact confirmation
Material edits and expired drafts require confirmation again.
Conflict protection
Overlap, role, membership and working-time checks stay deterministic.
Site-scoped access
Supervisors only see authorised sites; no self-approval.
Private evidence
Short-lived signed URLs only after authorisation.