Sample rows removed. Committee-scoped projections via CASA_API.commadmin. No broad member PII, secrets, or finance-ledger access.

Public JSON is C0-only. Publish jobs upload immutable revisions then switch feed pointers. Bunny failures keep the old pointer active. Retraction clears registry URLs and preserves audit.

Membership uses relation documents. Office-bearer terms cannot overlap. Attendance scans are idempotent. Committee Admin sees masked member projections only — no religious/photo cells. Archival blocks new activity but preserves evidence.