- ✓Claim lifecycle
- draft → ready → filed → delayed / ach_rejected / netted → posted → closed, with guard rails at every transition.
- ✓CAPE outcome capture
- Record accepted, accepted-with-errors, rejected, and upload-rejected outcomes against specific filing packages with trusted R2 evidence references.
- ✓Corrected-entry repackage
- One-click correction export from an accepted-with-errors outcome; duplicate-submission guard enforced by signature hash.
- ✓Refund window monitoring
- 90-day deadline tracked from filing date. Color-coded countdown on every claim: green → amber (14 days) → red (overdue).
- ✓Payment recording
- Multiple payments per claim. Supports REV-603, REV-613, REV-615, ES-701, ES-702, ACH, check, and other form types.
- ✓Audit pack ZIP
- Downloadable ZIP per claim: hash-chained audit JSON, Markdown memo, evidence index, and MANIFEST.json — no external PDF library required.
- ✓CFO summary
- Importer-level summary report with claims by status, total estimated vs. received refunds, overdue window flags, and payment breakdown by form type.
- ✓Portal drift gate
- CBP source URLs are monitored by SHA-256 hash. A high-severity change to the CAPE CSV template freezes new exports until an admin resolves the alert.
- ✓Field-level encryption
- PII columns (email, signer IP) are encrypted at rest with AES-256-GCM. Backwards-compatible — plaintext rows are returned as-is.
- ✓Hash-chained audit log
- Every status change, export, payment, and outcome is appended to a tamper-evident audit chain, scoped per importer.