Stricklands Admin

User-management shell

Local proof entry for the app-owned user manager, shell navigation, taxonomy controls, menu profile, and fail-closed access gates.
Local proof
App-owned access
Fail closed
Adminapproved route hubUserslist, edit, taxonomyPersonasaccess proof matrix

Access guardrails

Provider-safe local lane

Protected routes fail closed

Signed-out, wrong-domain, pending, and override personas do not get shell access.

App database owns authority

Roles, visibility, lifecycle, and review state stay in the app-side model.

Provider mutation blocked

This local proof lane does not mutate Clerk, Convex, or live provider records.