# Commercial v4 review notes

The uploaded v3 application was well-hardened for a single kiosk/site, but it was not structurally safe for a centralized multi-branch deployment because `staff`, `attendance_logs`, the administrator model and the configured device identity were global.

Commercial v4 changes the authorization boundary from “one installation = one branch” to explicit `organization_id` / `branch_id` ownership plus branch-bound kiosk devices and role permissions. UI restrictions are supplemental; the server validates scope again for protected reads and writes.

Major additions: organizations, branches, departments-ready schema, kiosk devices, named users, roles, permissions, user branch access, audit logs, commercial dashboard, attendance browser, richer staff directory, cross-branch reports, secure activation links, responsive navigation and a migration path that retains old attendance history.