Identity foundation
Ready
Better Auth, Prisma identity models, account states, bootstrap tokens, and secure credential storage are complete.
Phase 4
DevOps now includes owner bootstrap setup, mandatory authenticator enrollment, mandatory MFA login, workspace membership and permission boundaries, invitation-only onboarding, and workspace-scoped projects without implying that cards, boards, releases, or broader administration are already complete.
Identity foundation
Better Auth, Prisma identity models, account states, bootstrap tokens, and secure credential storage are complete.
Login and session security
Active accounts complete password verification plus MFA, protected routes resolve sessions server-side, and sensitive actions require fresh reauthentication.
Workspace authorization
Workspaces, memberships, roles, and default-deny server permission checks are now available.
Project layer
Workspace-aware projects, project keys, project settings, archive and restore flows, and project-scoped navigation are now available.