The miscellaneous platform work is where scope quietly expands. Workspaces, invites, scoped data, API keys, signed webhooks, file upload guards, and operator safety rails all need clean edges.
- Workspace memberships
- Invite flow
- Scoped data access
- `sk_*` API keys
- Hashed key storage
- Signed webhooks
- Upload hardening
- Operator guardrails