3-Level Ownership (`tenant` | `workspace` | `user`) & AES-256-GCM AAD Isolation Prover
Verifies that Sales Rep B cannot read Sales Rep A's private WhatsApp, Marketing Manager cannot read CEO's private LinkedIn DMs or publish without CEO HMAC receipt, and Vault AAD blocks cross-user unsealing.
Visible Connected Accounts 0
Switch Actor Persona above to observe private `USER` accounts (`MD Personal LinkedIn`, `Ahmed Personal WhatsApp`) appear or vanish automatically. Check accounts below to target in Composer.
Scoped Unified Inbox (`can_read_inbox` Enforced) 0
Private DMs & personal WhatsApp chats are strictly hidden unless `X-Actor-Token` matches `owner_user_id` (even Admins/Managers with publish grants are blocked from private DMs without `can_read_inbox`).
Multi-Channel Oman Execution & Simulation Composer
Supports `fixture_sim`, `live_preview` (stops before submit), `live_api`, and `live_cdp`, plus integer `Baisa` (`OMR`), 63 Oman Wilayats, Krooki coordinates, TRA SMS quiet hours, PDPL opt-out check, and live OTP injection.
Execution Outcome, Composer Preview & DOM Telemetry
Inspect per-channel outcome status, rendered SVG composer preview, KMS Vault AAD verification, and auto-resumed OTP steps.
GA4 Admin + Microsoft Clarity + GTM + `vai-pixel.js` Control Plane
Programmatically provisions GA4 Property & Key Events, Clarity Project & Copilot Bridge, GTM Container v2 tags, and First-Party Oman PDPL Edge Pixel.
Thawani Pay (`Baisa`) Chat-to-Cash → Meta/TikTok/Snap CAPI + GA4 MP
Generates Oman Thawani checkout links in integer `Baisa` and dispatches server-side `Purchase` conversions with SHA-256 `+968` EMQ hashing on payment confirmation.