Hand a teammate or support engineer time-boxed, scoped access. Every session is signed, chained into the integrity log, and revocable at any time.