StealthQL · Live Demo

Support is blind

Your customer support team should be able to help. Not see everything. Watch the same database refuse to leak — even to the people who built it.

Capsule running locally · zero cloud roundtrips
The cast

Three actors. One database. One policy boundary.

A

Alice

Admin · Acme Labs
  • Reads invoices in her org
  • Sees private internalNote
  • Can issue shares to support
S

Support

Platform engineer
  • No membership in any org
  • No billing scope
  • May read scoped shares only
B

Bob

Member · Beta Works
  • Reads invoices in his org
  • Cannot read Acme's data
  • Different tenant entirely
The proof

Six tries. Watch the policy hold.

Customer view

Alice opens her invoice.

She owns the data. She sees everything: customer, amount, status, and the private founder note.

stealthql · alice
READY
// click "Read as Alice" to fire this request
The receipt

Every read is signed. Hash-chained. Tamper-evident.

Audit ledger · live

no events yet — run a scene above