AUDITOR — production wired (read-only)

Sample rows removed. Evidence projections via CASA_API.auditportal. Cannot mutate source records, permissions, publication, refunds, or audit history.

COMMITTEES — membership / office terms / meetings

Membership uses relation documents. Office-bearer terms cannot overlap. Attendance scans are idempotent. Committee Admin sees masked member projections only — no religious/photo cells. Archival blocks new activity but preserves evidence.

Read-only

Auditor workspace has no Add/Edit/Delete/Approve/Refund/Publish controls. Optional audit observations only.

Office-Bearer Changes

WhenRecordActor / subjectSummary