Trust needs a place you can open.

The customer trust centre gathers pending approvals, active and stalled work, recent receipts, memories with provenance and connected Google or Microsoft sources in one signed view.

It does not build a second trust database. Each section reads or links to the same record SA‑NT already uses to work, remember and prove an action.

Capture can be paused immediately. Restarting requires a deliberate confirmation. A connected account can be disconnected without affecting another account family, and the change is written to the action ledger.

Export and account deletion use the existing durable rights jobs and require the recovery phrase when one is set. Lockdown blocks both. Deletion is not reported complete while a provider exception or an offline device still owes an acknowledgement.

The trust centre is available in the private pilot and still needs live rights-flow verification. Links expire, are scoped to this page and do not reveal provider credentials, private media or internal operating controls.

The page makes existing authority easier to exercise. It does not widen what SA‑NT may collect, retain or do.