Security
CSP, strict headers, invite verification, role alignment, and rate limiting.
Console V2 Ready
Secure by default and invite-gated for two moderator classes.
Super Admin users are restricted to bootstrapped @codewiredinc.com emails. Admin Moderators must verify invite email + GUID before Auth0 login is allowed.
SSO
Auth0 session/password with pre-auth guardrails and email consistency checks.
Data Layer
Server-side Postgres access with parameterized SQL and typed results.