As-of: …

ILIP signs the same compliance-docs bucket EMS does (Phase 50). PDFs render inline via iframe under a CSP frame-src allowance for the Supabase Storage origin; DOCX and other types open via download since the browser has no native renderer. Litigation-hold join wired (Phase 51) — Under-hold badge per row + Holds-only filter + tile count. Privilege overlay wired (Phase 55) — privilege_class inferred from document_type, per-row chip color-coded by class, sign-url endpoint enforces ABAC on the storage boundary so a savvy caller can't bypass via direct id. "Enforce privilege" toggle hides inaccessible rows; off-by-default so operators can audit classification before locking down access.

Escalation creates a row in ilip.escalations via POST /api/escalations (subject_kind=finding). Accept / Override / Defer / Reopen dispositions write to ilip.finding_resolutions (append-only — supersession via is_current flip). ILIP findings themselves remain append-only per spec §30.5 P5. ABAC: OVERRIDE requires Sponsor or Counsel; ACCEPT / DEFER / REOPEN permit OPERATOR.

AI-governance metrics (grounded / refusal / unverified rate) aggregate from conversation_messages.verification_status over the same window as the rest of /api/health; chat.js stamps every assistant message via lib/grounding.js. Discovery bundle ships as a single ZIP assembled client-side via JSZip (Netlify Functions cap synchronous responses at 6MB).

Royalty data is operator-entered per ilip.royalty_streams (Phase 57). Each statement period appends an immutable row in ilip.royalty_periods — restatements insert a corrected period rather than overwriting. No external API subscription required. Patent maintenance fee schedule surfaces here once an application is issued and the USPTO ODP poller on the patent platform records the first maintenance window.

Account metadata is append-only (only role / status / signatories / notes mutate after insert; entity / institution / type / mask are write-once). Balances are fully immutable — correcting a posted balance means inserting a new snapshot at a new as_of. Foundations and trust accounts surface here under the same ledger; the entity column makes the partition explicit.

Conservation easement status (AITCH Conservation Foundation), VDACS/state charitable-solicitation registration, expenditure-responsibility chains for §4945 grants — those ship when the EMS foundation document classifier emits matching tags. Until then the per-foundation panel surfaces the obligation rows ILIP holds today.