Authorisation in the database
Every exposed table resolves to an account or show boundary and is protected by Row Level Security. Client-side visibility is never an access-control boundary.
Trust
Security, privacy and audit
ManeEvent handles minors' data, veterinary records and money. Protection is enforced by the database and server functions, not by hiding buttons.
Access by assignment
Judges, scribes, stewards and scorers see only the cards their active assignment grants, for the window it covers.
Private documents
Passports, memberships and vaccination evidence live in private storage reached only through short-lived signed access, scoped to a show and purpose, with sensitive views recorded.
Immutable evidence
Entry snapshots, signed score sheets, scanned originals and reconciliation exports are never overwritten. Corrections create new, attributed versions.