One workspace per audit engagement: the auditor's request list, files provided (from the books or uploaded, each with its sha256), queries, and an access log. Auditor logins see only their engagements.