Host is not authorization
A domain may suggest presentation context; it never grants organization membership or data access.
Security and trust
Authority is explicit. Data access is earned, never inferred.
AFLO is designed around tenant isolation, permissioned access, evidence provenance, and fail-closed behavior.
Private by design
Authenticated financial routes remain excluded from indexing and public site infrastructure receives no tenant database credentials.
Truthful states
Unknown, unavailable, unauthorized, and zero are different states and remain visibly distinct.