ScopeLock is an open-source SaaS product: a multi-user, multi-workspace system of record for client scope, change requests, approvals and delivery evidence, built for agencies and freelancers whose scope creep lives in email, chat and meeting notes. It answers four questions: what was agreed (a versioned Scope Ledger), what has changed since (change requests with an agreement diff), who approved each change and when (a login-free client decision link plus a tamper-evident audit trail), and what the change does to price, effort and delivery date (an impact preview). Published baselines are immutable, every approval is bound to a checksum of the exact package the client saw, and AI only drafts: people publish and decide. The interface is a modern SaaS app shell (sidebar navigation, light and dark themes, command palette, skeleton loading, a public landing page, English and Bangla, fully responsive) used by two roles: the agency team and the client approvers. It runs locally with zero setup (file-backed store, with log fallbacks for email, storage, realtime and AI), seeds a 16-project CodeJBorg demo workspace with one-click logins, and self-hosts with Docker Compose and PostgreSQL. MIT licensed and not deployed yet.