Supabase boundary
Create separate development and production projects; apply migrations and verify RLS before using private data.
Authentication can now be attempted. Each identity, migration, connector and model still counts as active only after its own successful read-back.
Create separate development and production projects; apply migrations and verify RLS before using private data.
Bootstrap James’s allowlisted owner identity, invite David separately, then enrol TOTP MFA.
Supply an approved OpenAI model through a protected server environment and verify a real receipt.
Link the private repository, verify the production build and bind the approved domain.
Authorize each connection independently after its scope has been reviewed.