Platform owner portal
Separate trust boundary from customer organisation workspaces (/app/). Manage fictional customer setup previews only — not day-to-day care records.
Preview only. No portal login POST, no admin session from a form, no database queries, no customer workspace access, and no billing or email integrations.
Security & audit (sample)
Append-only audit stream is planned — no live log on this host.
Audit preview rows
- Portal page viewed (sample) —
- No customer data accessed —