What is running, and what is enabled per deployment.

• Public site

  Running

  Published content, edited by named web administrators

• Workspace

  Running

  18 modules, API-backed, gated at every surface

• Governed API

  Running

  Access ladder enforced server-side

• Source connectors

  Per deployment

  Built against your systems during onboarding, one boundary at a time

• Write-back to source systems

  Off by default

  Enabled only for a scope your team has approved

• Sign-in and sessions

  Running

  Real credential check; access level derived from the assignment

• Organisation SSO

  Running

  Odoo is the identity provider and assignment authority

• MFA / recovery

  Not built

  A tenant's own identity provider would enforce these

• Lead routing / CRM

  Not connected

  Forms validate and stop

• TLS on the demo host

  Not configured

  Plain HTTP on an IP; needs a domain

Gate status is unchanged by anything on this page: no live source integrations, no real tenant data, write-back disabled. Treat it as a working demonstration of governed patterns.