How modules work

The registry and the grant

The backend owns a module registry — the single source of truth for what a platform can be granted. Each platform carries a plaintext modules allowlist (it holds no secrets — it is a list of module names we defined), edited from the Super Dashboard. Unknown keys are dropped on save rather than stored, so a value that isn't a real module can never later be misread as a grant.

Some modules declare dependencies (forms depends on records; invoices and depend on ) — a capability that rides another isn't granted in isolation.