The system
Roles and approvals built in
What each person can see and do is set by role, so a judge, a clerk, and a treasurer each see what their job needs. Sensitive actions need a sign-off before they are final.
Access follows the job. A judge reads the docket, a clerk files, a treasurer approves, and no one sees more than their role calls for.
The AI does the legwork, then a person approves before anything is recorded as final. The tribe stays in control of every decision.
Every approval is itself a record that proves itself, so it is always clear who authorized what.