Private
Private Tier
Authenticated workspace shell for the Hong Kong / Shenzhen mission team. No private data ships here until auth and row-level security are verified.
Tier statusEnabled · not verified
Sign-in is active. RLS and membership provisioning still require production verification.
Sign-in is disabled. The auth shell activates only after Mohammed verifies row-level security and redirect URLs, then enables the private-tier flag.
Role model
ownerMohammed
Full Tier-2 read/write once features exist
teamPure Advance travelers
Team-private notes and operational data
program_viewerProgram / external
No Tier-2 access by default
Row-level security is fail-closed: a signed-in user without a provisioned membership row sees nothing. Membership is granted only via the service role.
Tier-3 boundary
Booking references, gate passes, IDs, payment data, and private contacts never enter this app — even behind auth they stay in the private pack (Tier 3). This page is not cached by the offline service worker and requires a connection.