Multi-Tenant AI Support SaaS with Database-Enforced Security

This is an AI support platform for businesses. One agent answers across six channels from one workspace. There is no long-running app server. All server logic runs in edge functions, which run per request and keep no state.

The database enforces access. The browser queries PostgreSQL directly. Its row-level security policies decide which rows each business can see.

We turned ten architecture rules into automated tests. Code that breaks a rule stops the build. Another test compares schema changes in the live database with those in the code. A gap in either direction stops the build.