Active HR cases are `projects` tagged `hr-process`, `confidential`, pathway, stage, and company.
Staff identity and access gating come from `entities(kind='staff').payload.org`.
Evidence and documents are tracked in the project body and filed under the staff HR Drive folder.