2026-11-06: company lifecycle, transfers and audit log (Wave 5.4)#

• Lifecycle. suspendPlatformCompany, reactivatePlatformCompany, closePlatformCompany, reopenPlatformCompany, archivePlatformCompany and companyClosingChecklist. PlatformCompany.lifecycle reports the state; platformCompanies takes lifecycleStates and includeArchived and hides archived companies by default. Mutations on a non-active company fail with COMPANY_SUSPENDED, COMPANY_CLOSED or COMPANY_ARCHIVED.
• Transfers. companyTransferStatement, createCompanyTransfer, companyTransfers, cancelCompanyTransfer, acceptCompanyTransfer and, for a FinBaze account, companyTransferClaimPreview and claimCompanyTransfer. New embed element company-transfer.
• Users. deprovisionPlatformUser(userId, anonymise); a deprovisioned user's tokens fail at once.
• Audit. platformAuditLogs (scope audit:read, admin role, keyset pagination), requestAuditLogExport and an audit_log export kind. Audit entries now record the token type, IP, user agent, request id, step-up assertion and support grant; new actor kinds platform and support.
• Events. company.suspended, company.reactivated, company.closed, company.reopened, company.archived, company.transfer.created, company.transfer.cancelled, company.transferred_out, company.transferred_in and platform_user.deprovisioned, each with a JSON Schema in the catalogue.
• SDK. platform.companies.suspend/reactivate/close/reopen/archive/closingChecklist, platform.transfers, platform.users.deprovision and platform.audit.