Agency HQ
Sign in
Staff sign-in
supabase-authinvite-only — there is no sign-up
The identity provider proves WHO. It is never the data path: every read and every write goes through withModule(module, actor, fn), which opens a transaction issuing SET LOCAL ROLE app_<module> and platform.set_actor(). A query outside that transaction does not exist.