The live execution state of the RLS + MFA rollout. Each checkpoint lands behind its own reversible step — this page shows what's done, what's next, and exactly how to roll each one back. Status is read live from pure_authwindow_checkpoints.
Plans & Docs›Auth Window Plan›Checkpoints
Sign-in works verify staff can authenticate RLS read-only RLS writes MFA enforcement. Every step is reversible, and two doors stay outside the app's own auth at all times: the Supabase dashboard and the service_role key. No permanent lock-out is possible while both are retained.
PURE MLS Technologies · Auth Window execution tracker · status is live from the database