Citrate Membership
The core-membership service (Phase-D money path). This deployment is the foundation build: identity (OIDC RP), the order state machine, the audit hash-chain, and field-level encryption are live. The payment rail, grant orchestrator, and treasury signer are seams that report not configured until their later work packages land — nothing here fabricates a payment or an on-chain grant.
- Identity: OIDC relying party against auth.citrate.ai (fail-closed).
- Orders: draft → paid → granted → active → lapsed/renewed.
- Audit: BLAKE3 hash-chain, tamper-evident on replay.
- At-rest: AES-256-GCM field encryption, keys outside Neon.
- Stripe / grant / treasury: honest stubs (coming).