Identity & access
| Identity | Scope | Authority |
|---|---|---|
| Demo accountant | Aster Trading Ltd | Prepare preview |
| Independent reviewer | Aster Trading Ltd | Review preview |
| Client portal user | Separate application | No staff posting authority |
Deployment policy
| Environment | Auth0 | Demo mode |
|---|---|---|
| Development | Optional with explicit demo configuration | Allowed — synthetic subject only |
| Staging / internal pitching | Optional with explicit demo configuration | Allowed — prominently labelled |
| Production | Required | Refused |
Role labels are illustrations, not grants. Core and Firm membership remain authoritative. No access changes are saved here.