sequenceDiagram
    participant B as Browser
    participant H as Houston
    participant AAD as Entra ID
    participant S3 as S3-Speicher

    B->>H: GET /documents
    H->>H: Prüfe Claim Documents.Read
    alt Keine Rolle
        H-->>B: 403 Forbidden
    else Rolle vorhanden
        H->>H: Lese efecte:company_id aus Claim
        H->>S3: ResolveCustomerPrefixAsync(orgId)
        S3-->>H: Kundenordner-Prefix
        H->>S3: ListObjectsV2(prefix)
        S3-->>H: Objektliste
        H-->>B: Documents-Seite
    end