Scheduled read-only Microsoft Entra ID access governance digest. It reads bounded pages of users, groups, applications, service principals, directory audit logs, and sign-in logs through recued-core.microsoft-entra, renders compact tables, and optionally sends an in-app nudge when matching audit or sign-in events are visible. It never creates or deletes users, resets passwords, mutates MFA, changes role assignments, creates app credentials, changes conditional access policies, assigns licenses, or calls arbitrary Graph APIs.