The proofs folder shows up in the client's Files app

Your photography client reviews on an iPad. You don't want to teach them a portal. You send two things: the files URL of their container and a password.

On the iPad: Files → Connect to Server → paste the URL → enter the password. The container appears in the sidebar under Shared. /hoody/storage/proofs opens like a local folder: thumbnails, swipe, pinch. They drag the keepers into /selects. You see each move in the file journal on your side, timestamped, the moment it happens.

The proxy permission for that password group is files: true and nothing else; the terminal and the desktop don't exist for them. When the job closes, delete the group.

No app, no account. The tablet ships with a WebDAV client, and the container is a WebDAV server.

The deliverable folder is a network drive the client's iPad already knows how to mount.