Aevaro Platform · CP4 Admin Session Foundation

Unified control plane for auth, entitlements, provisioning, and Admin Mode.

This repo owns the platform-wide truth for organizations, people, billing, product access, principal-aware audit, and the admin shell. It does not own product domain logic and it does not collapse into Flow.

Build Now
Human-first control plane with principal-ready seams. No policy engine. No approval graph.
Principal Types
humanagentinfra
Products
coreconnectlearningdeeptraitspeopleflowattract
Phase 1 Scope

What this repo is building now

Platform organizations, people, memberships, and principal-ready identity records
Billing accounts, subscriptions, product entitlements, and seat-aware access grants
Product provisioning state, projection references, and replay-safe audit seams
Separate Admin Mode foundations with product visibility driven by entitlements
A dedicated control-plane data boundary that stays separate from products and Flow
A server-only Supabase service boundary that can probe the linked control-plane project safely
Deferred

What stays out for now

Full policy engine and rich capability matrices
Multi-step approval graphs and delegated authority chains
Vendor-agent marketplace and external leased automation
Cell-ops UI, routing overrides, and migration consoles
Deep product-admin modules beyond the control-plane entry shell
Admin Mode IA

Top-level navigation

  • Overview
  • People
  • Teams & Departments
  • Access & Roles
  • Products
  • Billing
  • Security
  • Integrations
  • Audit Log
  • System Health
Repository Contract

Execution boundaries

Product databases remain the source of product state. This control plane owns the platform truth for identity, access, billing, entitlements, provisioning, and audit.

Flow remains the execution highway. Product cells remain data planes. This repo owns the layer above them that decides who exists, what they bought, and what they can touch.

Agents are future-proofed through the principal model, but the full agent-governance stack is intentionally deferred until the first real agent features ship.