restricted financial report — access by key only. all activity is logged. money is only read, never moved from here.