Accountant — read the memos addressed to you
Senders name you by your ordinary wallet address, and what they disclose to you opens with a key only your wallet can produce. Decryption happens right here in this tab — the key never leaves it. The pool serves the public envelopes; yours open, showing the amount and the memo. You cannot spend them: the note's secret is not in the auditor's slot at all, so this is a separation in the ciphertext rather than a rule someone has to enforce.
Your wallet signs one phrase; the reading key is computed from that signature here and is never stored. The signature approves no payment and moves nothing — an auditor's key cannot move anything at all.