What each role does

Manager

Authors
Opens the case, owns the case facts, assigns investigators, sets the days and each day's time zone, and runs the agency around it.
Reads
Everything on the case, plus the agency's KPIs, timecards and report branding.
Cannot
Nothing on the case is closed to them — which is why release is theirs and theirs alone.

Investigator (PI)

Authors
The surveillance day: field log, the day's updates, video and photos, and the day's facts. Produces the day's documents and submits them for review.
Reads
The online investigator's findings, because a PI cannot plan surveillance without them.
Cannot
Release anything to the client, or see the subject's personal identifiers — field work does not need them.

Online investigator (OI)

Authors
The open-source research: identifiers, addresses, findings and gaps, the client-facing OSINT report, and the pre-surveillance intelligence report.
Reads
The case facts and the surveillance record, and the subject's identifiers for background checks.
Cannot
Release anything to the client, or author the surveillance day.
The rule behind the gates

A role gate protects authoring. It never hides a finding.

An investigator cannot write the online investigation, and they can read every word of it, because planning a day without it is guesswork. Gates decide who may change a record, not who may know what the case has found.

Review

A queue, not an inbox.

Submitted documents land in one place for the manager to approve or return for rework. Approved work is locked as evidence until it is deliberately returned.