
- We never confirm whether an email address is registered on the sign-in screen.
- Financial writes require a live server confirmation. Offline mode cannot mark a transfer successful.
- Audit records of sensitive events are kept for authorized operators and are not shown as a customer feed of secrets.