Skip to the screen
Client portals — a look inside A drawing. Nobody in it is real. B9 of 41 Part real

You’re walking asMaria Reyes, who runs AtlanticaSetting up a portal

Prototype · Setting up the portal for

Showing: People who buy from you. Pick another kind and this line says which of the eight fills moved.

Act B · The firm

Invite people

From the right record for this kind — and for a kind with no records, the honest different answer

Which part is real: The invitation machinery is written and running: an invitation goes only to an address a record already holds, it expires, and it can be withdrawn. What is drawn is pointing it at a supplier record or a team, neither of which the product has today.

AtlanticaSet up · Portals · People

Invite people from the account

An invitation goes to an address the account already holds. Nothing here lets you type an address in, and that is deliberate — it is the rule that makes this safe.

Marisol Vegamarisol@marisols.example · signed in TuesdaySigned in
Ana Duarteana@marisols.example · invited 9 Aug, not opened yetInvited
Tomas VegaNo email on the record — nothing to send toCannot invite
Watch the first invitation
When it goes wrong

One of the three people here has no address on the record, so there is nothing to send an invitation to.

No email on record
Why this screen is here, and what it proves
Shape divergence · not a fill This screen changes shape for members of the public, and that is a finding

Every other kind is invited to an address a record already holds — that rule is what makes invitations safe. A member of the public has no record, so there is nothing to invite. It is not a different fill on this screen; it is a second way in, and an unauthenticated one. It has its own screen rather than a quiet redraw.

The screen where that is drawn
Closest call · ruled a fill The closest call in the walk, ruled a fill

Your own people and a service team are not invited from an outside record — they are added by the owner from people already inside the firm. That is arguably a different step. It is ruled a FILL because the list this screen reads from is literally fill two, the lifecycle after it is identical, and one live access per person still holds. Recorded here rather than decided quietly.