# Shadow access audit

**The wedge use case.** Freeside installs beside your incumbent gating bot -
Collab.Land, Matrica, Vulcan, or homegrown - and audits it without touching
anything.

Every 6 hours it compares two independent witnesses per member:

* **The chain**: does this member's linked wallet meet your published cohort's
  condition?
* **The platform**: do they hold the role that cohort grants?

Where the witnesses disagree, you get a flagged row with evidence - balance vs
threshold at a specific block - never a verdict. You decide whether it's a
stale role, an intentional exception, or a real leak.

The audit is read-only by construction: no Manage Roles permission, and a
runtime guard that refuses role mutations.