Identity first
Every private request is verified on the server.
Invited buyers sign in with Google or verified email, follow real project progress, and review private evidence inside their own organisation.
The public preview never reads or displays a buyer organisation.
Every private request is verified on the server.
Queries and file access use the active Clerk organisation.
Findings carry severity, source evidence, and clear corrections.