Public visitors submit questions through a hydrated contact island. Rows persist in Supabase for admins to review—separate from temperature telemetry. This workflow keeps support out of personal email folders and aligns permissions with group membership instead of sharing one password.
Submission path
- Visitor completes contact form island.
- API route validates and inserts row with timestamp.
- Admin views queue under dashboard admin section.
Review habits
- Mark handled to avoid duplicate replies.
- Cross-link users to feed configuration docs when relevant.
- Escalate billing issues to Stripe subscription records.
Security
Rate-limit public POST endpoints at the edge. Admin list routes require admin group—see admin features and secrets hygiene.