Answers for the four sect 5 questions: minimal human-only authenticated surface (console-vs-server-side stays open for requirements.md), archive downloads with a named trigger, per-identity email over the alk.dev catch-all as a stated transparency requirement, and an admin-action audit trail accepted as family-posture material