Core Platform

Core Platform covers the baseline that every active tenant depends on: tenant identity, login, roles, permissions, feature modules, branch scope, customer scope, audit logs, and safe errors.

Included capabilities

Capability	What users experience
Tenant isolation	Users only work within the tenant, branch, customer, or fleet scope they are allowed to access.
Role-based access	Navigation and actions follow assigned role and permission.
Feature modules	Disabled modules appear as intentional disabled or unavailable states, not broken controls.
Audit logs	Sensitive lifecycle actions create traceable records for support and review.
Safe errors	Unauthorized IDs should not reveal whether another tenant’s record exists.

Audit review remains limited to the records a reviewer is authorized to access. Search, filters, and page navigation narrow that view; they do not grant access to other records or reveal private diagnostic information.

Module state model

Frontend visibility improves usability. Backend enforcement is still the source of truth.