{"id":"tenant_isolation_review_company_client_demo_brand_demo_store","status":"TENANT_ISOLATION_REVIEW_READY_LOCAL_ONLY","companyId":"company_client_demo","companyName":"Cliente Demo","brandId":"brand_demo_store","brandName":"Demo Store","clientPortalId":"client_portal_company_client_demo","tenantScope":"COMPANY_LEVEL_RLS","accessModel":"READ_ONLY_CLIENT_VIEW","rlsStatus":"LOCAL_RLS_TARGET_DOCUMENTED_NOT_APPLIED","productionEnabled":false,"productionReadiness":"BLOCKED_BY_SECURITY_GATE","noCustodyOfFunds":true,"notPaymentGateway":true,"providerFeesIncluded":false,"settlementHandledByProvider":true,"isolationChecks":[{"id":"growth_company_members","label":"Company-level RLS through growth_company_members","status":"DOCUMENTED_LOCAL_TARGET","evidence":"supabase/migrations/20260625174800_growth_platform_rls.sql"},{"id":"no_anon_grants","label":"No anon grants for Growth Platform tables","status":"DOCUMENTED_LOCAL_TARGET","evidence":"docs/contracts/data-contract.md"},{"id":"brand_company_match","label":"Brand belongs to requested company","status":"PASS_LOCAL_DATASET","evidence":"brand_demo_store -> company_client_demo"},{"id":"read_only_portal","label":"Client portal remains read-only","status":"PASS_LOCAL_VIEW","evidence":"READ_ONLY_CLIENT_VIEW"},{"id":"credential_references_omitted","label":"Credential references and bank fields omitted from review","status":"PASS_SANITIZED_OUTPUT","evidence":"review payload"}],"evidenceRequired":[{"id":"supabase_rls_lint","label":"Run Supabase RLS lint against local database","href":"docs/contracts/security-contract.md","status":"REQUIRED_BEFORE_PRODUCTION"},{"id":"two_user_rls_test","label":"Validate two-user company isolation with authenticated users","href":"docs/contracts/data-contract.md","status":"REQUIRED_BEFORE_PRODUCTION"},{"id":"client_portal_read_only_review","label":"Review client portal read-only access model","href":"/growth-platform/client-portal/company_client_demo","status":"CLIENT_PORTAL_READY_READ_ONLY_LOCAL"},{"id":"security_preflight","label":"Run local Security Gate preflight","href":"/api/security/preflight","status":"REQUIRED_BEFORE_PRODUCTION"}],"blockedDecisions":[{"id":"production_tenant_readiness","label":"Production tenant readiness","status":"BLOCKED_BY_SECURITY_GATE"},{"id":"public_client_portal","label":"Public client portal exposure","status":"BLOCKED_UNTIL_ACCESS_REVIEW"},{"id":"live_provider_access","label":"Live provider credentials or routing","status":"PROHIBITED_LOCAL_ONLY"}],"exports":[{"label":"Exportar tenant isolation JSON","href":"/api/growth-platform/tenant-isolation-review?companyId=company_client_demo&brandId=brand_demo_store","format":"json"},{"label":"Exportar tenant isolation Markdown","href":"/api/growth-platform/tenant-isolation-review?companyId=company_client_demo&brandId=brand_demo_store&format=markdown","format":"markdown"}]}