Read-only by design
- Clear “archive / as-of” state on every screen
- Course and term navigation that requires little retraining
- Role-based access to sensitive student records
- Searchable IDs, course codes, people, and content
- Audit logging for sensitive record access