Pre-Audit Document Tracking

Documents moved between offices for pre-audit with no reliable record of where any given document actually was. A document marked "released" by one office was not necessarily "received" by the next, and the gap between those two facts is exactly where documents go missing and accountability evaporates.

The core design decision was to stop treating a hand-off as a single event.

• Modelled the lifecycle as seven explicit statuses, expanded from an earlier five-status design, so a document in transit is distinguishable from one that has been confirmed received.
• Made receipt a confirmed action by the receiving office, not something the sending office can assert on its behalf. That single change is what converts a status field into an actual chain of custody.
• Scoped the office picker so users route to other offices rather than accidentally back to their own.
• Shipped with a migration path from the live five-status data, since the system was already carrying real documents when the redesign landed.

The seven-status recipient-confirmed workflow is deployed and carrying real pre-audit documents in production. Every hand-off now has a confirmed receiver, so "where is this document" has a definite answer.