Know what's actually built

The build-status page separates what runs in production from what is a scaffold, verified against the source tree — because the architecture documents describe the target design, not the current state.

Isolation enforced in the database

Shared-schema multi-tenancy with Postgres row-level security on every tenant-scoped table, running as a genuinely restricted role, with pre-filtered graph and vector access and a regression test that fails if that ever regresses.

One canonical schema

A single Person entity every module reads and writes, tenant-defined custom fields that need no migration, and a knowledge graph derived from and kept in sync with the relational data.