Admin Guideline

Tech Stack

• Framework: Next.js
• API: tRPC
• Database: Neon (Postgres)

Non-Negotiables

• Admin bootstrap must use secure allowlist, not file seeding; must be permanently disabled after first admin
• All privilege grants must be audited (who/when/why)
• Actions affecting money/access/security require step-up controls
• Secrets must never be exposed through admin UI

Context

The admin platform is where operational power lives — and where operational mistakes happen. A well-designed admin reduces the chance of human error while giving operators the tools they need to resolve issues quickly.