Multi-tenancy, invitations, role-based access, seat-based billing, and an append-only audit log — wired end to end on SvelteKit, Supabase Auth, and Postgres with Row Level Security.
This is a live demo of the shipped kit, running on Cloudflare Pages + Supabase (RLS). Sign in to explore: open Northwind Labs, add members via invite links, change roles, and watch the audit log. This is open demo data — no real email is used.
dana@northwind.example / Dana-demo-2026 · member: riley@northwind.example / Riley-demo-2026| Organizations & membership | create · invite links with expiry · transfer ownership |
| RBAC | owner / admin / member — enforced server-side, not just hidden UI |
| Row Level Security | tenant isolation enforced in Postgres, plus application-level RBAC |
| Seat-based billing | adapter interface + mock; merchant-of-record wiring documented |
| Audit log | append-only by construction, no delete path exists |