Architecture

The Hub is a Vite/React/TypeScript SPA with React Router. Supabase provides authentication, Postgres with RLS, Storage, Realtime, and Edge Functions. Vercel is configured as the web deployment target.

The browser uses only public Supabase configuration. Privileged credentials belong in server-side function environments. Client routes and role display are convenience layers; RLS and resource-specific function/RPC checks are the authorization boundary.

The app is single-event, not a multi-tenant SaaS. Sponsor membership is a key scope for sponsor data, while event-wide approved content is intentionally shared. Review docs/security/SECURITY_BASELINE.md and the current migrations/tests before changing a boundary.