Operate
Security model
Understand sessions, scoped keys, RLS, encrypted provider credentials, and the boundaries that keep private material server-side.Credential classes
| Credential | Where it may exist | Storage |
|---|---|---|
| SDK ingest key | Mobile/browser application | Lookup + secure hash |
| Server send key | Trusted backend only | Lookup + secure hash |
| APNs/FCM private material | Notifie server only | Encrypted, write-only to browser |
| Supabase service role | Dashboard/worker server only | Deployment environment |
Ownership
Dashboard reads use user-scoped Supabase clients and Row Level Security. Service-role operations derive and scope app_id from already authenticated input.