External Client Review Portal

A standalone, chrome-less web experience for external (client/sponsor) reviewers, isolated from the internal application and surfaced as its own module so the client-facing features and the access boundary are explicit.

Surface

/external/:token — a chrome-less page with the assigned Release Candidate's document preview, a comments panel, and a deadline banner. No internal navigation.

Access

• Reached via an email-verified secure token (External Reviewer Grant), scoped to one Release Candidate.
• Tokens are revocable and may expire; expired, revoked, or unknown tokens show a friendly empty state.
• An external reviewer can reach only their assigned RC — never internal modules, the Study Model, other studies, or non-assigned artifacts (reinforces AC-005).

Capabilities

• View the assigned RC's current document version.
• Submit section comments.
• Record approval (informational; gates nothing).

The Release Candidate lifecycle, comment disposition, and grant invite/revoke are driven from the internal side — see Document Review.