Product scope

Choice:

• Upload-only: every number comes from an uploaded document (upload-only, no-manual-entry). A user may correct a parsed field on Review; the old value is logged. Typing a money value no document carries is forbidden.
• Identities other than Self are created only by the parser. Settings › People & accounts is read and delete only.
• Four pillars: Inbox, Tax, Expense, Portfolio. Inbox and Tax gate the web launch; Expense and Portfolio are reachable but not promoted.
• The six root files (SPEC, CATALOG, SCREENS, FLOWS, ROADMAP, DECISIONS) are gone; knowledge lives in .context/.

Why: a number that no document backs cannot be audited, and a user-made identity would put phantom rows in every rollup.

Rejected: manual entry screens (including a capital-gains entry screen) · "+ Add identity" and "Edit" on non-self identities · launching all four pillars at once.