Scope is still unconfirmed with the client — storage only, or a broader workflow (e.g. e-signature, expiry reminders). Kept minimal until that's decided.