The Indirect-Access Defence Framework.

Six measurement-stage defensive interventions.

1. Why indirect users surface during USMM and how to anticipate the flagging. The three USMM signals SAP audit teams consume to escalate from user count to indirect-use audit, with named-detection logic for each.
2. The eight source tables that produce the customer-side evidence pack. CDHDR, CDPOS, USR02, AGR_USERS, BAPI logs, RFC trace, and the two newer Digital Access tables — what each one contains and how to extract it cleanly.
3. Architecture classification under five patterns. Read-only, write-back, document-creating, batch-exchange, and human-in-the-loop — and the licensing basis each one defensibly supports.
4. The 68% claim-reduction baseline. The settlement performance band we have observed across 500+ engagements, with the variance drivers and the tactical levers that move the customer up the band.
5. The seven measurement-stage interventions. Submission re-statements, classification challenges, scope objections, evidence requests, and three more interventions that fork the claim before it becomes commercial.
6. The negotiation choreography after the claim has crystallised. Sequencing, document discipline, internal alignment, and the four conversations that compress a multi-quarter dispute into a single quarter.

Seven chapters. Forty-four pages.

Four audiences. One framework.