iBilik Capital - Phase 3 v6 Super Admin Security Center
========================================================
Runtime standard: PHP 8.0.30 / MySQL 5.7.44
Interface: Chinese + English

DEPLOYMENT ORDER
1. Backup current database and application files.
2. Import database/ibilik_capital_database_v1.4_security_admin.txt.
3. Upload/overwrite Phase 3 v6 application files.
4. Keep assets/config/config.php with the correct production DB credentials.
5. Sign in with the Super Admin account.
6. Test Account Management, User Edit, Security Center and Security Audit.

NEW CAPABILITIES
- Edit user profile, department, email and account status.
- ACTIVE / SUSPENDED / DISABLED state control.
- Update function/action/report permissions per user.
- Reset user password (bcrypt; no plaintext stored).
- Regenerate 9-character MID; full MID shown once only.
- Reset Password/MID failure counters.
- Force revoke all active sessions for a user.
- Review active sessions.
- Review/release IP locks.
- Review recent login attempts.
- Immutable audit records for sensitive administrative actions.
- Dedicated credential event history; never stores password or full MID.

SECURITY NOTES
- Password reset or MID regeneration increments credential_version and revokes active sessions.
- Disabling/suspending an account revokes active sessions.
- IP unlock is audited.
- All new table/column comments are Chinese as required by iBilik Capital database rules.
