AUDITOR — production wired (read-only)

Sample rows removed. Evidence projections via CASA_API.auditportal. Cannot mutate source records, permissions, publication, refunds, or audit history.

NOTIFICATIONS — email / SMS / WhatsApp / FCM

Intents carry identifiers only. Templates are allowlisted and escaped. Sensitive workflows use generic “open CASA securely” wording. Secrets rotate with overlap; webhooks require signatures. No contact lists in the browser.

Read-only

Auditor workspace has no Add/Edit/Delete/Approve/Refund/Publish controls. Optional audit observations only.

Notification History

WhenRecordActor / subjectSummary