Checks

Owner/admin role; clear invites; editable settings; notification email.

Org notes

Member list and permission layers match entity.

With 2FA

Finish roles and recovery the same day.

Contract

Write role completion into close conditions.