Nine modules - forms, workflows, dashboards, documents, master data - behind one console; eight in the shell, the ninth a control plane. 🔐 Tenant isolation enforced 4x: gateway, EF Core query filters, an app.tenant_id interceptor per connection, PostgreSQL FORCE RLS under NOBYPASSRLS roles 🧪 A conformance test goes red if a table ships without a policy 👤 One level + module perimeter per user, replacing 27 IdP roles 🔀 Drag-and-drop workflow designer compiled into Elsa 3 🔌 10 connector families (REST, SQL, S3, SMTP, DocuSign, MCP), vault-backed ✅ 31 xUnit backend test projects