Skip to content

Enterprise & Governance

Multi-tenant governance building blocks for organizations rolling out SkillMeat beyond a single user — role-based access, audit trails, and signed artifact attestation. These are real, shipped capabilities, framed the way they're actually proven today: available in controlled enterprise pilots, not yet claimed as production-hardened at scale.

Who it's for: platform owners and admins standing up SkillMeat for a team or org, who need tenant isolation, permissions, and an audit trail before they'll trust a shared collection.

The local edition (SQLite plus filesystem, zero-config LocalAuthProvider) is single-tenant by design and doesn't need any of this. The enterprise edition adds a PostgreSQL-backed multi-tenant layer on top — see Using SkillMeat Enterprise Features for the full picture and Enterprise Deployment for how it's set up.

How to read the tags

Local — shipped in the local edition, no flag needed. Enterprise — shipped in enterprise, no launch-blocking gate. Gated — shipped, but behind a feature flag, auth wall, or readiness gate (see the caveat in each row). Future — roadmap only; not available today.

What you can do today

Capability Availability Learn more
PostgreSQL multi-tenant backend with UUID primary keys, JSONB, and Row-Level Security migrations Gated — controlled-pilot caveat: RLS migrations are applied and enforced at the database layer, but cross-tenant denial has not been demonstrated on a sustained live production run, and some telemetry tables aren't yet covered — treat isolation as validated for controlled pilots, not proven at broad production scale Enterprise Deployment
Clerk JWT authentication for team/tenant scoping, plus an Enterprise PAT provider, with a fail-closed startup guard Enterprise Using SkillMeat Enterprise Features, Authentication Setup
Audit Events API (REST query, NDJSON export, OpenTelemetry trace correlation) and self-service RBAC role administration, both with tenant-stamped, savepoint-guarded audit writes Enterprise Audit Events API & Admin UI, Enterprise RBAC Role Administration
Per-artifact BOM (bill of materials) generation with Ed25519 attestation, enabled by default Enterprise Enterprise Governance Guide
Signed version attestation — real Ed25519 signing, persisted with the artifact's version snapshot Enterprise Enterprise Version Management
Cryptographically enforced approval / hard-update gates Future The current hard-update path records an audit event but does not itself invoke signing — treat version signing and update approval as two separate capabilities today
100k-scale performance guarantees, measured disaster recovery (RPO/RTO), cross-org federation, and content moderation at scale Future No live load run, measured recovery drill, cross-org data path, or moderation-enforcement surface exists yet

Go deeper