Agency signup creates a pending tenant, not an active operator.
The auth lifecycle is split in two: identity verification can happen first, but full operational access is only granted once the agency is both email-verified and approved.
The app foundation is organized around ledger correctness, grant-lot traceability, approval workflows, and retry-safe background work before UI polish.
The auth lifecycle is split in two: identity verification can happen first, but full operational access is only granted once the agency is both email-verified and approved.