The internal analyst workbench. Access is least-privileged by default.
Get it right the first time. Every cross-section, every closure, every volume backed by an audit trail a senior geoscientist would defend in front of an operator's technical team.