The downloadable BFL 5 kap. 11 § template (Hjälp > Dokumentmallar) had not
been touched since March and had drifted into describing a system we no
longer run. Users archive this document as räkenskapsinformation for 7
years, so the wrong facts were being filed as compliance evidence.
Corrected against the code:
- Auth was "Magic link via e-post (lösenordsfri)". It is e-post + lösenord
with TOTP two-factor, plus optional BankID (lib/auth/require-auth.ts,
lib/auth/bankid.ts).
- Access control claimed "en användare kan enbart se och redigera sin egen
data" with a single "Kontoägare" role. Data is company-scoped via RLS and
there are four roles, owner/admin/member/viewer
(20260330130000_multi_tenant_company_refactor.sql).
- Rättelse described storno only. Inline rättelse in the same verifikat has
existed since 20260723210000_verifikat_inline_rattelse.sql; the template
now documents both tracks and the rule that a locked or closed period
leaves storno as the only route.
- Voucher numbering claimed uniqueness "per räkenskapsår och användare" and
a single series. It is per company, fiscal year and series, and the series
is configurable per source type (lib/bookkeeping/engine.ts).
- Product is Accounted, not erp-base (lib/branding/service.ts).
- OpenAI is listed as an embeddings integration; only a stray env var
remains in lib/init.ts. Removed. Added Skatteverket, BankID and PostHog,
which were missing.
- Navigation paths were pre-redesign: Kontoplan is under Data, moms under
Skatt, and behandlingshistorik exports from Importera/Exportera >
Säkerhetsbackup, not the "Rapporter > Audit trail" that does not exist.
- BAS 2025/2026 -> BAS 2026.
Added the sections a systemdokumentation needs and this one lacked: API
keys and machine access (external agents can write to the ledger under
scoped keys and are logged as the actor), löner/AGI, anläggningsregister,
periodiseringar and dimensioner as delsystem, and säkerhetskopiering.
The granular "BFNAR 2013:2 punkt 9.x" citations are dropped rather than
renumbered; see DECISIONS.md.
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
Broad update across dashboard pages, components, extensions, and lib code. Includes ESLint config additions, onboarding flow redesign, settings page refactor, help page content expansion, dead code removal, and test mock fixes. Adds dev docs and public assets.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Jakob Wennberg