Milestone 8 — secure subscriber workspace and private evidence storage
LT SmartTender now has a protected subscriber workspace covering the daily dashboard, opportunity feed, organization setup, capability profile, compliance matrix, and explicit online/offline states. Supabase Auth sessions are refreshed and verified before protected routes, and sign-out uses a same-origin POST.
The live Supabase project now has a private, organization-scoped evidence bucket with a 25 MiB cap, approved PDF/DOC/DOCX/JPEG/PNG types, member read access, owner/analyst create-delete rights, viewer write denial, and immutable object keys. The Supabase security advisor reports zero findings.
The AI boundary now includes strict requirement-extraction contracts with official source locators and deterministic hard filters for closed deadlines, geography, mandatory codes, certifications, and explicit exclusions. Invalid dates escalate to human review instead of creating a false decline.
Repository milestone: commits 759020d and a4127f9. CI passes lint, typecheck, 187 tests across 38 files, production build, and Cloud Run container build.
Still gated: live source and Gemini credentials, tenant read-model wiring, persistent onboarding, Storage API delete verification, clean-browser PWA tests, and production redeployment. This milestone does not claim live Gemini execution.
Log in or sign up for Devpost to join the conversation.