user
User CRUD, role management, document tracking. Foundation module — every other module depends on it indirectly.
notification
Email delivery, templates, user preferences, unsubscribe tokens. Ships with a noop driver by default; configure SMTP at /admin/modules to send real mail. See Notifications & SMTP.
tenant
Orgs and memberships — the substrate for the two-tier tenancy model.
authz
Permissions, roles, Cedar policy engine. Provides the Authorize() primitive every other module's RBAC middleware leans on.
auth
Email/password (argon2id) + OAuth 2.1, JWT, sessions, RBAC middleware. See Authentication flow for the cross-module view.
navigation
Builds the dynamic sidebar/menu for the admin UI from each enabled module's NavItems. Disabled modules drop out of the menu automatically.