Blog
Engineering notes on how the kit is built — sample data only, written from the same codebase the sample app runs on.
Tenant isolation by default: how the kit scopes every query
Every tenant-facing query is scoped to the current account, client-supplied account ids are rejected, and e2e tests prove it.
Inside the Buildgrain sample workspace
What actually happens when you sign in to the public sample app: seed cloning, owner access, and the current cleanup limitation.