High-risk exports
Blocked until review decision or prep worksheet mode.
Governed workflows replace page-count theater.
v20 keeps server-side policy, signed upstream session support, audit integrity, high-risk export blocking, legal-review routing, and branded document workflows active.
Auth boundary
Signed upstream sessions, no built-in login.
Audit ledger
Append-only hash chain for API events.