Access hardening
Finish named user access, verify owner, broker-admin, and agent session flows, and decide when shared Basic Auth fallback can be disabled for real client use.
Client isolation pass
Continue auditing admin actions, exports, packets, dashboards, and agent views so each brokerage workspace stays cleanly scoped.
Demo cleanup
Preserve proof records but remove or neutralize distracting test leads, placeholder records, and internal-only artifacts before giving a real brokerage named access.
First paid-client provisioning
Collect real brokerage inputs: domain, branding, roster, listing links, routing rules, CRM/export needs, support owner, launch window, and success metric.
CRM path
Start with CSV import/export and field mapping. Add provider-specific API sync after real client exports and credentials define the exact requirements.