Finance users need controlled access, durable audit history, source lineage, and approval gates before AI ROI values become board-ready.
Current build uses a local enterprise-session shell. Production access should use SSO, SCIM, RBAC, and audit access logs.
Replace this shell with Clerk, Auth0, or enterprise IdP SAML/OIDC before handling real customer financial data.