M3 · Studio beta, in build
SlowCompass Studio
The operator foundation is merged and its security gates are proven. What exists above it is a shell: three route groups, navigation derived from the authorization matrix, and placeholder pages that each name the phase which builds them. No operator surface does its job yet.
Closed and proven in the foundation
- Workspace membership and role authorization, mirrored in row-level policies
- Public reads through a published projection that excludes address, contact and payment state
- Guest capability tokens — signed, purpose-scoped and short-lived — replacing order-ID QR access
- Atomic capacity reservation, proven against two measurably overlapping sessions
- Scheduler authorization that fails closed when unconfigured or weakly configured
Still gated, and gated deliberately
- Real users and client data — there is no sign-in, and nothing can yet create a workspace
- Email delivery — security gate 5 is open until a verified sending domain exists
- Payments — Stripe Connect is a later milestone; payment surfaces read existing structures only
- Deployment and public demonstration — neither is approved
Occurrence sources recognised by the shared domain: studio · host_agenda · editorial_manual · external_link