HIOP separates model capability from permission to cause consequential effects.
Independent production certification is not yet complete. MFA and enterprise SSO are not represented as enforced until their full challenge and identity-provider flows are enabled. External adapters remain disabled until configured and approved.
Authenticated organizations can manage roles, evidence retention preferences, account exports and governed deletion requests. Destructive actions are reviewed against ownership, evidence and billing obligations.