Security
Trust is a ledger property.
Ikibina separates platform administration from group membership, records financial actions, and treats configuration as something that needs a reason — and sometimes a second admin.
Separated portals
Admin and group sign-in are different routes. A member token cannot open the platform console. Magic link is offered as a second option after password.
Two-factor for operators
Platform admins can require an authenticator code or recovery code after password. Sessions can be reviewed and revoked from the admin console.
Audit and versioned config
Config modules store a revision, author, timestamp, reason, and diff. High-impact keys wait for a second approver when more than one platform admin exists. Rollback is a first-class action.
Proofs and backups
Contribution proofs are stored with signed, time-limited links. The admin console can trigger backups, inspect checksums, and run a restore dry-run before anything destructive.
What we do not do
SMS is off by default and stays locked in configuration. Auto-confirming contributions is also off — a manager should see the proof. We will not ask you to paste passwords into a group chat. If you need a detailed data-processing note, start with the privacy policy.