Unified login → portal
One sign-in; role routes to the correct panel automatically.
Security & tenancy
Role-true panels. Partner scope. KYB before trust.
RankinSoft Tracer separates Super Admin, Auditor, Brand Owner, Factory, Supplier, Supplier Manager, Buyer — with login lockouts and public/private split.
- Partner scope
- KYB gates
- Action badges
- Public DPP isolation
Security cells
What we lock by design
Partner visibility
Companies only see linked counterparties — not the whole network.
Action badges
Counts only for roles that can act (orders, products, invoices, sends).
KYB gates
Company identity and certs before serious volume.
Public surfaces
DPP/Twin expose approved facts — not private drafts.
Admin empty logs
Demo/load-test cleanup without touching production config casually.
Auth console
How access stays locked to the right desk
login --unified
Role routes to the correct portal
scope.partners --linked-only
No whole-network dump
badge.pending --actors-only
Counts only when you can act
kyb.require --before-volume
Identity before serious sends
public.isolate --approved
DPP/Twin never leak drafts
Honesty
Security is also product honesty
We do not pretend buyers can mine yarn or suppliers can approve producer invoices. The UI matches the policy on RankinSoft Tracer™.
- Auditor oversight Read-oriented views across partner-scoped evidence.
- Factory limits Cannot replace Brand Owner Ready approvals.
- Supplier Manager Owns create/send gates when auto-approve is off.
- Buyer boundary Verify and accept — never Update Token.
Tenancy clarity
Open network vs partner-scoped RankinSoft Tracer
Risky defaults
- Everyone sees every company in the network
- Pending badges for actions you cannot take
- Public DPP leaks draft products
- One mega-panel for every role
Designed defaults
- Linked counterparties only
- Badges only for actors who can click
- Approved facts on public surfaces
- Role-true panels after unified login
Access dossiers
What each panel is allowed to hold
Eight roles · four panels · zero role cosplay.
Admin hub
Network links, approval settings, email, membership packs.
Brand Owner + Factory
Shared wallet; Ready stays manager-true.
Supplier panel
Create/send yarn with manager gates.
Buyer panel
PO and invoice — proof without edit rights.
Control dials
Hard numbers behind the vault
8
Distinct desks with distinct permissions.
4
Admin, producer, supplier, buyer boundaries.
0
UI never offers actions policy forbids.
KYB
Identity and certs before serious sends.
Security doctrine
If the UI offers an action the policy forbids, the product is already insecure.
RankinSoft Tracer™ keeps panels role-true and public surfaces draft-free.
Session pulse
From login to locked public proof
Login
Unified sign-in
Lockouts protect accounts; role routes to the correct portal.
Scope
Partner filter
Queries stay company / supplier / buyer scoped.
Act
Badge honesty
Counts appear only when you can complete the work.
Publish
Public isolation
DPP/Twin show approved facts — never private drafts.
Read how compliance feeds the vault
KYB and certificates are how RankinSoft Tracer keeps public proof honest.