FIREproof uses a client-owned model: a prospect's plan starts out advisor-managed, and when the client claims it, ownership transfers to them while you stay on as a collaborator. It's "Google Docs for the retirement plan."

Inviting a client to claim

1. From your Book of clients (or the client's workspace), choose Invite to claim.
2. Confirm the client's email, and FIREproof emails them a tokenized claim link.
3. The client opens the link and signs in (or creates an account) with that email. Their verified email is the proof; on confirmation, ownership transfers to them.

Explorer vs. Edit collaboration

When you open a client-owned plan you're placed in Explorer mode by default. A persistent banner always shows whose plan you're viewing and your current mode, with a guarded toggle to switch.

• Explorer (default, sandbox): the input editor is locked, so you can never accidentally change the client's records. You can still run simulations (including ephemeral what-if overrides) to explore ideas; nothing persists.
• Edit (explicit toggle): writes go through to the client's plan and every cross-owner change is audit-logged. Switching into Edit requires an explicit confirmation.