Triatu Supabase
Quick start
- Validate inputs with Zod before any DB call.
- Domain must not talk to Supabase directly.
- Keep PII out of logs; use
lib/loggeranddebugonly in dev.
Workflow
- Define interfaces in Domain or Application.
- Implement Supabase access in adapters (Infrastructure).
- Call adapters from Application use cases.
- Update policies and schemas in Supabase; note changes in docs.
- Add/adjust tests before code (TDD).
Guardrails
- No direct infrastructure calls from Domain.
- Avoid global state unless justified.
- Record new risks in
docs/PROJECT_AUDIT.md.
References
docs/SECURITY.mddocs/PROJECT_AUDIT.mddocs/CORE.mdguia.md