auth-kit demo
A starter site on AWS Amplify Gen 2 with sign-in from auth-kit: passkeys first, then a password with an authenticator code, then an emailed code as the backstop. Accounts are by invitation only.
Projects
Each project has its own Managers, Contributors, and Readers. Members see only the projects they have a role on; site admins see every project. Anyone else asking for a project by its address gets “not found”.
Admin
One owner, Super admins, and admins (content & people, content only, or view only) run the site. Every change is written to an append-only activity log.