PHP runtime
Running PHP 8.4.26.
Clean rebuild
Secure authentication on top of database-enforced tenant isolation.
Phase 4 adds editable Starter, Standard and Premium plans, private payment QR/evidence storage, manual UTR approval, immutable subscription snapshots and Admin billing history on top of the secure multi-tenant foundation.
Secure bootstrap
Strict sessions, CSRF and security headers are active.
Database
Database connected. Run php scripts/migrate.php to install pending migrations.
Tenant schema
Accounts, Groups, Branches, assignments and User profiles are installed.
Authentication layer
Password auth, throttling, reset tokens, session versioning and panel switching code is ready; run migrations for database tables.
Super Admin foundation
Phase 3 Super Admin management code is ready; run migrations for its tables.
Billing & subscriptions
Phase 4 billing code is ready; run migrations for its tables.
Admin onboarding
Phase 5 onboarding code is ready; run migrations for its tables.
Tenant guard
Server-side Group/Branch context verification is installed.
Private storage
Private files remain outside the web root.
Secrets
.env exists locally and remains git-ignored.
Shared controls