Founder-only admin
Production /admin opens only for the founder UUID and stitchaxis.com operator mailboxes. A paying Gateway customer cannot open the operator console, even if a role row is wrong.
Security · what is live
Gateway is a memory product with a card-on-file trial. This page lists the controls in production today — not a future enterprise brochure.
Production /admin opens only for the founder UUID and stitchaxis.com operator mailboxes. A paying Gateway customer cannot open the operator console, even if a role row is wrong.
Buyer data is scoped to the signed-in org. Core memory for paying workspaces persists per org. The public 10-op edge proof uses a guest bucket that never writes into a paying workspace.
Supabase RLS is on for subscriptions, usage, outreach, and operator tables. Browser clients do not get grants on operator tables. The app uses the service role only after a server-side gate.
Outreach drafts stay pending until a human copies them into Outlook. The app never emails a prospect. API keys are stored hashed.
Not claimed