Platform owner portal
Separate trust boundary from customer organisation workspaces (/app/). Manage fictional customer setup previews only — not day-to-day care records.
Preview only. No portal login POST, no admin session from a form, no database queries, no customer workspace access, and no billing or email integrations.
Demo control (sample)
Demo entry at /demo/ is separate from portal. No live tenant crossover.