Co-founded office suite
Stackd
An office suite that replaces the per-seat tools a company rents separately with one login, one data layer and one price per seat. I co-founded it, and I built the shared core every app runs on and the checks that keep one company's data away from another's.
- TypeScript
- PostgreSQL
- Row-level security
- Vitest
How it works
- Appschat, docs, sheets, CRM
- Shared coreidentity, permissions
- One databaseevery row tagged by company
- Isolation suiteattacks as every role
- File gatewayrefusals look identical
- License gatechecks each dependency
Decisions that matter
One core under every app
Every app runs on one shared core that handles identity, permissions and which company a request belongs to. I wrote it.
Isolation is tested by attacking it
The suite reads the live database catalog, so a new table is covered the day it is migrated. As every runtime role, it tries to read, change, delete and insert into another company's rows, and a positive control makes sure "nothing visible" is not just a role that could never see anything. It runs on two Postgres versions.
Files behind one gate
A file request that is denied, missing or fails looks the same to the caller, so nobody can tell whether a file exists.
License rules are data
The dependency gate reads its allowed licenses from a policy file. Every exception records who decided it, when and why, so changing what the build accepts leaves a trail.
Limits
Pre-launch. My parts are the shared core, the isolation suite, the file gateway and the license gate. My co-founder built most of the app screens.
