The entry panel calls the assistant, which identifies the tenant, then rings each contact in the escalation order you define.
Time-bound, entrance-bound passes with hashed codes, usage limits and a hard three-attempt ceiling per call.
Every release is authorised server-side against the call, entrance, pass window and lockdown state — then logged.