iHome Platform Dev Log · Sep 23

The platform shipped its admin permission model today: sensitive operations now require a TOTP second factor, and permissions are no longer one big switch — they're tiered and scoped: who views, who edits, who approves, each in its lane. The migrations ran on both databases with acceptance checklists backfilled. Multi-field identity lookup also landed: off-platform apps can now resolve accounts by email, phone, or third-party identity, and admins can see exactly which login methods a user has bound. All of this is foundation for credential-safety features like "sign out other devices" and "password change revokes everything."