Knowing a person is not enough to grant access.

Individual identity, current organization membership and product-specific access are distinct responsibilities. Evidence state remains explicit: manual registration is not verification.

Responsibility map · separate product checks, not a universal security guarantee.