Security
Controlled access, recorded custody
Security here means two things: physical control over the assets we hold, and disciplined control over the records that describe them.
Physical custody
Assets under restricted control
Restricted storage areas
Assets are held in controlled storage areas. Entry and handling are limited to authorised personnel performing a recorded custody action.
Authorised handling only
Receipt, verification, movement and release of an asset may only be carried out by staff authorised for that action.
Monitored holding areas
Storage and handling areas are monitored, and any custody event is written to the record for the asset concerned.
Record security
Records that cannot quietly change
Protected administration
Staff access to custody data requires an authenticated account with an explicit role. Authorisation is enforced on the server, never in the browser alone.
Append-only history
Custody updates are added, not overwritten. Each entry keeps its date, time, status, description and the staff reference that made it.
Private lookups
A tracking lookup must match exactly. Unknown numbers return a simple not-found response with no hints, no suggestions and no record data.
