Skip to main content
Riverbend Secondary College

Diagnostics

Configuration

Deployment
sandbox
School
Riverbend Secondary College
Tenant
11111111-1111-4111-8111-111111111111
Database
aws-0-ap-southeast-2.pooler.supabase.com:5432 — opened by node-postgres. Every read and write goes through createDatabase(…).withTenant(verifiedClaims, …) as authenticated — a role that is not a superuser and does not hold BYPASSRLS, checked on first use. Nothing in this build has a service-role path, and check:service-role fails the build if one appears.
Development bearer token
absent — the API cannot authenticate anyone

Entitlements

Licensed non-core modules: none.

Absent from navigation because they are not licensed: student-profile, identity, curriculum, learning, student-profile, staff-operations, attendance, emergency, student-care, health, events, assets, data-insights, assessment, learner-record, examinations, enrolment-admissions, sport, careers, student-care, behaviour, emergency, health, events, data-insights, movement, transport, community-services, board-and-committees, knowledge-and-policy, knowledge-and-policy, faith-mission-ministry, workflow, workflow, organisation. They are absent, not disabled — there is no greyed-out item anywhere in the shell, and no code path that could produce one.

Mounted routes

  • GET /api/v1/curriculum/course-versions/:id — requires curriculum.course.view, denial shape forbidden, risk tier standard
  • GET /api/v1/identity/students/:id — requires student.profile.view, denial shape not_found, risk tier standard
  • GET /api/v1/attendance/sessions/:id/roll — requires attendance.roll.view, denial shape forbidden, risk tier standard
  • GET /api/v1/attendance/observations/:id — requires attendance.roll.view, denial shape not_found, risk tier standard
  • GET /api/v1/attendance/summaries/:id — requires attendance.roll.view, denial shape not_found, risk tier standard
  • GET /api/v1/gradebook/results/:id — requires gradebook.result.view, denial shape not_found, risk tier standard
  • GET /api/v1/events/consent-requests/:id — requires events.consent-response.view, denial shape not_found, risk tier standard
  • GET /api/v1/events/excursions/:id — requires events.event.view, denial shape forbidden, risk tier standard
  • GET /api/v1/assessment/submissions/:id — requires assessment.submission.view-assigned, denial shape not_found, risk tier standard
  • GET /api/v1/identity/students/:id/family-relationships — requires student.profile.view, denial shape not_found, risk tier standard
  • GET /api/v1/movement/passes/:id — requires movement.pass.view, denial shape not_found, risk tier standard
  • GET /api/v1/transport/manifests/:id/passengers — requires transport.manifest.mark, denial shape forbidden, risk tier standard
  • GET /api/v1/reporting/report-editions/:id — requires reporting.report.contribute, denial shape not_found, risk tier standard
  • GET /api/v1/assets/device-loans/:id — requires assets.device-loan.manage, denial shape forbidden, risk tier standard
  • GET /api/v1/staff-operations/compliance-alerts/:id — requires staff-operations.compliance.view, denial shape not_found, risk tier standard
  • GET /api/v1/assessment/extension-requests/:id — requires assessment.submission.view-assigned, denial shape not_found, risk tier standard
  • GET /api/v1/learner-record/transcripts/:id — requires credential.transcript.generate, denial shape not_found, risk tier standard
  • GET /api/v1/learner-record/credentials/:id — requires credential.award.issue, denial shape not_found, risk tier standard
  • GET /api/v1/examinations/sittings/:id — requires examinations.session.supervise, denial shape not_found, risk tier standard
  • GET /api/v1/activities/participation-records/:id — requires activities.participation.view, denial shape not_found, risk tier standard
  • GET /api/v1/governance/meetings/:id — requires governance.meeting.view, denial shape forbidden, risk tier standard
  • GET /api/v1/enrolment/applications/:id — requires enrolment.application.process, denial shape not_found, risk tier standard
  • GET /api/v1/recognition/ledger-entries/:id — requires recognition.ledger.view-assigned, denial shape not_found, risk tier standard
  • GET /api/v1/curriculum/framework-versions/:id — requires curriculum.framework.view, denial shape forbidden, risk tier standard
  • GET /api/v1/transport/service-runs/:id — requires transport.manifest.mark, denial shape forbidden, risk tier standard
  • GET /api/v1/staff-operations/positions/:id — requires staff-operations.position.view, denial shape forbidden, risk tier standard

Audit

Records go to audit.event, through PostgresAuditWriter. They are durable and queryable, and the table refuses UPDATE, DELETE and TRUNCATE from every role including its owner. RETENTION is not implemented and no default was invented: how long a school must keep an access record is a legal question nobody has answered here.