This control plane turns synthetic access certification exports into one review surface: privileged-role renewals, sponsor-backed guest reviews, service-account ownership, evidence continuity, and attestation packet completeness before renewal confidence is asserted.
/, /campaign-lane, /review-exceptions, /attestation-posture, /verification, /docs
/api/dashboard/summary, /api/campaign-lane, /api/review-exceptions, /api/attestation-posture, /api/verification, /api/sample
dotnet run --project src/AccessCertificationApi.Api -- --demo prints the same campaign posture used by the public proof surface.