SECURE WORKSPACE ACCESS

Decisions need context. Access needs proof.

• Supabase owns identity
• Rails enforces permissions
• Every workspace stays isolated