DevOps

Phase 4

Foundation ready

DevOps now includes owner bootstrap setup, mandatory authenticator enrollment, mandatory MFA login, workspace membership and permission boundaries, invitation-only onboarding, and workspace-scoped projects without implying that cards, boards, releases, or broader administration are already complete.

Identity foundation

Ready

Phase 0

Better Auth, Prisma identity models, account states, bootstrap tokens, and secure credential storage are complete.

Login and session security

Ready

Phase 0

Active accounts complete password verification plus MFA, protected routes resolve sessions server-side, and sensitive actions require fresh reauthentication.

Workspace authorization

Ready

Phase 0

Workspaces, memberships, roles, and default-deny server permission checks are now available.

Project layer

Ready

Phase 0

Workspace-aware projects, project keys, project settings, archive and restore flows, and project-scoped navigation are now available.