Capability → Module Map

What this covers / who it's for. The bridge between the product wiki and the code: for every product capability, the module(s) that own it, the engineering wiki page that explains the machinery, and the product page that describes the behavior. Use it to answer "who owns this?" and "where do I read more?" in one lookup.

Modules live in app-modules/<module>/; each README is the current source of specifics for its module. The engineering module catalog holds the full per-module engineering view.

Product capability	Owning module(s)	Engineering page	Product page
Tenant workspaces & isolation	tenancy	Tenancy & RLS	Tenant lifecycle
Registration, KYB/KYC onboarding	onboarding, tenancy	Provider integration	Tenant lifecycle
Login, MFA, step-up, passkeys	authentication, identity	Auth & RBAC	Personas & access
Teams, invitations, client roles	team, authorization	Auth & RBAC	Personas & access
Permissions & roles (both guards)	authorization	Auth & RBAC	Personas & access
Plans, tiers, quotas, fees	features	Module catalog	Plans & entitlements
Jurisdiction gating	jurisdictions, features	Module catalog	Plans & entitlements
Accounts, wallets, balances	accounts	Provider integration	Money movement
Deposits & travel-rule RFIs	funding	Provider integration	Money movement
Payouts (maker/checker), orders, recipients	payments	Provider integration	Money movement
Exports & monthly statements	payments, async-requests	Async platforms	Money movement, Async by design
Master balance & FX rates	treasury	Module catalog	Money movement
Compliance cases & SLAs	compliance	Module catalog	Compliance & trust
Account freeze / closure	compliance	The CQRS bus	Compliance & trust
SAR / CTR / travel-rule filings	compliance	Module catalog	Compliance & trust
Tamper-evident audit trail	audit	The CQRS bus, Observability & ops	Compliance & trust
Encrypted document vault	documents	Data model	Compliance & trust, Where data lives
Data classification & DLP	dlp	Data model	Data lifecycle guarantees
In-app inbox, email, comms log	notification	Module catalog	Notifications & comms, Communications delivery
Operator staff / roles / invitations	backoffice	Auth & RBAC	Operator backoffice
Operator support lookups	support	Module catalog	Operator backoffice
Background-work ledger (task runs)	task-runner	Async platforms	Operator backoffice
Request-then-poll async requests	async-requests	Async platforms	Async by design
Finance-rail (provider) integration	rails, provider-mirror, webhooks	Provider integration	Providers & rails
Shared conventions (bus, JSON:API, money)	foundation	The CQRS bus, API conventions	—

Decision rationale behind these boundaries lives in the decision log.

---

← Product wiki index