Good morning, Paul.

Local product concept · signed short-lived tenant identity and one-time, invoice-, revision-, and command-bound step-up proofs are exercised locally. Durable receipts make an exact retry safe after a lost response; command substitution and stale decisions fail closed. No external identity, push notification, banking, or card-network calls occur. Production substitutes enterprise OIDC, WebAuthn or verified IdP assurance, device posture, and remote revocation.