user
User CRUD, role management, document tracking. Foundation module — every other module depends on it indirectly.
notification
Email delivery, templates, user preferences, unsubscribe tokens. Ships with a noop driver by default; configure SMTP at /admin/modules to send real mail. See Notifications & SMTP.
tenant
Orgs and memberships — the substrate for the two-tier tenancy model.
authz
Permissions, roles, Cedar policy engine. Provides the Authorize() primitive every other module's RBAC middleware leans on.
auth
Email/password (argon2id) + OAuth 2.1, JWT, sessions, RBAC middleware. See Authentication flow for the cross-module view.
navigation
Builds the dynamic sidebar/menu for the admin UI from each enabled module's NavItems. Disabled modules drop out of the menu automatically.
logging
Runtime log-level administration for the slog pipeline (ADR-0005 Phase F). Operators flip the global threshold and per-module overrides at /admin/observability/log-levels and every existing module logger picks up the change instantly — no restart, no env-var edit, no image re-pull.
compliance
Platform audit trail + GDPR data-subject rights. Re-homed from a removed addon back into the always-loaded core by ADR-0009 — the personal data it acts on (user, auth, tenant) is core-owned, so the compliance plane ships on day one.