Sandbox & Test Account Cleanup — V13.2
Planning screen only. There is no functional sandbox switch, account deletion, or new permissions system in this build. Do not enter real passwords or confidential customer data here.
Development sandbox requirements
- Separate Netlify staging site, Supabase project/auth, storage, and Stripe test configuration.
- Master Owner always authorized. Employees and Managers need explicit Owner-granted access; Partners and standard subscribers do not receive development access.
- Only authorized internal personnel see an environment selector after secure identification. Backend must enforce environment authorization.
- Visible SANDBOX / TEST MODE banners on every test screen, and test watermarks on generated documents.
- Never clone real Whitmore Construction or Whitmore Financial records into staging without a separately approved sanitization plan.
Test account cleanup requirements
- Owner-only listing, selection, and review of accounts verified as test-only.
- Protect Whitmore Construction and Whitmore Financial, payment histories, and legally required records.
- Require server-side authorization, dependency checks, a confirmation step, and an audit log.
- No delete function should run until reviewed SQL migrations, RLS policies, backups, and restore testing are complete.
Support separation
Direct standard subscribers: LienTrackIt controls included orientation, annual complimentary credits, technician rates, packages, and credit usage. Partner-managed customer companies: Partner exclusively controls support credits, rates, packages, and technicians; LienTrackIt receives no support commission.