The shared data layer is now real.

Church Commons has a protected, additive organization-and-people schema in its own Supabase project. The earlier worship-planning prototype remains intact.

9new foundation tables

28row-level policies

1visible test tenant

0cross-tenant rows exposed

Canonical records

Organization & People schema

Additive migration

cc_tenants

The top-level data boundary; MVP becomes one tenant.

cc_tenant_memberships

A person's tenant, role bundle, status, and capability overrides.

cc_organizations

Private canonical records for churches, presbyteries, partners, and ministries.

cc_organization_public_profiles

The only anonymous organization projection; publication is explicit.

cc_people

Private person records with optional authenticated-account linkage.

cc_person_contact_channels

Email, phone, address, visibility, and primary-contact choices.

cc_organization_roles

Time-bounded appointments connecting people and organizations.

cc_audit_events

Append-only action metadata without copied sensitive field values.

cc_platform_stewards

A narrow, separately governed cross-tenant administrator list.

Executed acceptance test

Tenant isolation passed.

Two fictional tenants and two fictional organizations were created inside a transaction. The authenticated test identity could see its own organization and zero records from the other tenant. The transaction then rolled back every fictional record.

visible organizations1cross-tenant rows0

ConnectedThe private Site runtime now uses the project URL and browser-safe publishable key.

BuiltThe secure staff workspace now resolves authenticated users through protected server-side sessions.

VerifiedThe first MVP account separates the General Presbyter appointment from MVP-scoped administrative authority.