The downloadable BFL 5 kap. 11 § template (Hjälp > Dokumentmallar) had not
been touched since March and had drifted into describing a system we no
longer run. Users archive this document as räkenskapsinformation for 7
years, so the wrong facts were being filed as compliance evidence.
Corrected against the code:
- Auth was "Magic link via e-post (lösenordsfri)". It is e-post + lösenord
with TOTP two-factor, plus optional BankID (lib/auth/require-auth.ts,
lib/auth/bankid.ts).
- Access control claimed "en användare kan enbart se och redigera sin egen
data" with a single "Kontoägare" role. Data is company-scoped via RLS and
there are four roles, owner/admin/member/viewer
(20260330130000_multi_tenant_company_refactor.sql).
- Rättelse described storno only. Inline rättelse in the same verifikat has
existed since 20260723210000_verifikat_inline_rattelse.sql; the template
now documents both tracks and the rule that a locked or closed period
leaves storno as the only route.
- Voucher numbering claimed uniqueness "per räkenskapsår och användare" and
a single series. It is per company, fiscal year and series, and the series
is configurable per source type (lib/bookkeeping/engine.ts).
- Product is Accounted, not erp-base (lib/branding/service.ts).
- OpenAI is listed as an embeddings integration; only a stray env var
remains in lib/init.ts. Removed. Added Skatteverket, BankID and PostHog,
which were missing.
- Navigation paths were pre-redesign: Kontoplan is under Data, moms under
Skatt, and behandlingshistorik exports from Importera/Exportera >
Säkerhetsbackup, not the "Rapporter > Audit trail" that does not exist.
- BAS 2025/2026 -> BAS 2026.
Added the sections a systemdokumentation needs and this one lacked: API
keys and machine access (external agents can write to the ledger under
scoped keys and are logged as the actor), löner/AGI, anläggningsregister,
periodiseringar and dimensioner as delsystem, and säkerhetskopiering.
The granular "BFNAR 2013:2 punkt 9.x" citations are dropped rather than
renumbered; see DECISIONS.md.
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
