Auth & real RBAC
Auth.js / NextAuth with SSO stub and roles — Viewer, Maker, Checker, Compliance, Examiner — replacing the UI exploration switcher.
Bitcoin QuayProduct
Features we're working toward
The Operator Console is the primary commercial surface: dual-control, evidence-first, and built for credit union and CDFI operators — not hobby trading UX.
Approvals dual-control
Maker/checker queues for sensitive actions. Money movement stays as intents plus vendor decision IDs — no freeform wallet send.
Integrations allowlist
Approved Integration Boundary with admin CRUD. Production stays on the catalog — not arbitrary connectors.
Evidence export
Audit and evidence packs for examiners. Export stubs first; no SOC or PCI readiness claims in product copy.
Bitcoin infrastructure posture
Node and module posture for the institution. Protocol code tracks upstream separately from this commercial console.
Compliance-aware empty states
Masked NPI guidance, beachhead messaging, and stop-gates when a feature would expand regulated scope.
Roadmap language describes intent. Capabilities ship when dual-control, vendor adapters, and evidence paths are real — not when marketing says so.