Architecture
A routed application surface sits behind authentication, with tenant-scoped inbox data, preview-only email behavior, AI-assessment gates, and scheduled pipeline/notify/backup work separated from request-time interaction.
Engineering evidence
The live login route, isolated product shell, inbox states, scheduled digest controls, workflow labels, tests, and documented privacy boundary are the current evidence boundary.
Constraints
This asset is a public, security-reviewed explanation. Secrets, credentials, private repository content, and internal operating records are excluded.