Core tenant and module access
Operate the foundation without bypassing it
One foundation.
Clear operating surfaces.
Product workspaces, platform diagnostics, and a repeatable developer workflow now sit on the same authorization, isolation, provider, module, event, and billing contracts.
Product workspaces, audited admin diagnostics, and module tooling ready
Product workspacesCatalog-owned · Permission-aware
AdminDiagnosable · Fully audited
Developer pathScaffold · Validate · Test
Operating surfaces
Purpose-built views. Shared contracts.
Expanded capabilities and metering
Phase 10 principles
Easy to operate.
Hard to misuse.
Navigation follows permission
Each product workspace presents only server-authorized catalog routes. Every direct API call repeats the same centralized permission, product, and tenant checks.
Operations without database access
Platform administrators can inspect tenant, provider, job, dead-letter, billing, and audit health through secret-free, audited read models.
A repeatable module path
One local CLI creates modules, checks manifests and migrations, verifies SDK compatibility, and runs the generated test surface before integration.