The Yonda ecosystem uses a scoped multi-tenancy model to guarantee data sovereignty, privacy, and cultural governance.
| Role | Access Level | Publishing Permissions |
|---|---|---|
| Public Guest | Anonymous / CAPTCHA verified | Submits to pending moderation queue (status: draft) |
| Verified Council / Elder | JWT / Magic Link authenticated | Direct publishing bypass (status: published) within tenant scope |
| AI Bot Agent | API Key authenticated | Bulk ingest (source: ai_generated, status: draft) |
| System Admin | Global admin | Full system management across all tenant pools |
Directus and PostgreSQL policies isolate tenant drafts:
-- Scoped visibility rule
SELECT * FROM wayfarer_articles
WHERE status = 'published'
OR tenant_id = $CURRENT_USER.tenant_id;