Architecture
- Control plane vs runtime plane
- Provisioning flow and idempotency model
- Site isolation guarantees
Concepts
Architecture and platform boundaries.
This section defines control-plane/runtime separation, auth boundaries, and isolation expectations.
Auth and routing
/admin/public,/admin/api,/admin/data/data/publicvs/data/{operation}- Token and role boundaries
Security
- Per-site auth/data isolation
- Encryption and transport defaults
- Operational safety guardrails