Security and service boundaries
Public marketing pages are served separately from the authenticated Project Sasquatch application and API.
Governed customer access
Account identity and paid or Founder Beta entitlement are verified before customer access. Billable work is plan-gated and reservation-controlled; browser redirects alone never activate an entitlement.
Ownership checks, bounded temporary storage, redacted operational evidence, and no-fake-done runtime labels remain part of the application contract.