Access is scoped
Viewing, analysis, drafting, and execution remain separate permissions.
Security follows the sensitivity of the decision
Private by architecture. Permissioned by default.
Resources / 033 essential sections
Reviewed July 22, 2026
Reviewed July 22, 2026
Pareto separates viewing, analysis, recommendation, drafting, and execution so access to financial context does not silently become authority to act.
Sensitive actions pause
Risk and reversibility determine the approval required.
Reports stay private
Security concerns route through a dedicated server-side channel.
01
Identity and session controls
Authentication uses established identity infrastructure, secure redirects, and server-managed sessions. Sensitive routes require an authenticated user.
02
Scoped permissions and approvals
Agent and user actions can be limited by domain, amount, risk, and reversibility. High-impact actions require explicit approval.
03
Protected portability
Portable fiduciary packets are encrypted in the browser with a user-held passphrase before export.
Make the plan yours