One controlled path from intake to placement.
Each role sees the next safe action.
Role-based access starts here.