- src/auth.js: fetchIamUser extract isImpersonated from response - src/routes/oidc.js: save isImpersonated to session - ui/index.js: isImpersonated in req.user - ui/routes/entries.js: pass isImpersonated to render - views/index.ejs: banner 'Режим имперсонации' - docs/PLAN-impersonation.md: план дальнейших шагов (двойной аудит)