Wealth Admin
Governed inspection and operator action on top of the existing admin control plane.
Admin auth boundary
This console now requires a dedicated admin login before any household, workflow, or case data is rendered.
MFA must be enforced by the admin Cognito app client and user pool posture. Backend admin binding and permission checks still remain authoritative after sign-in.