- Branch-scoped RBAC
- Permissions are scoped by role, agency, and branch — a clerk of court, a permit officer, and a committee clerk hold disjoint capability sets on the same platform. Every screen, query, and export honors the same policy engine.
- Mandatory 2FA for officials
- No official acts on the record without a second factor. Enrollment is part of onboarding; recovery is an audited, supervisor-approved workflow.
- PKI official signatures
- Judges, mayors, secretaries, and heads of state sign with certificates issued under the deployment's own authority. Signatures bind identity, capacity, and document hash.
- Citizen accounts
- One citizen account for all of government, with adapters for national-ID verification where a national identity scheme exists — and enrollment paths where it does not.
- Delegation & acting capacity
- Officers-in-charge, acting judges, and deputized signatories are first-class: authority windows with start/end dates, visible on every act performed under delegation.
- Session & device policy
- Configurable session lengths, device registration for high-privilege roles, and immediate revocation on separation — tied to the Civil Service registry where deployed.