// private access

The boundary is the point.

Controls, dollar-level detail, broker routing, and command surfaces live behind this boundary. They stay separate from the public record so the published proof can be read without ever becoming a control path — nothing on the public site can move capital, and nothing behind this line is used to decorate it.