Public visitors submit questions through a hydrated contact island. Rows persist in Supabase for admins to review: separate from temperature telemetry. This workflow keeps support out of personal email folders and aligns permissions with group membership instead of sharing one password.
Submission path
- Visitor completes contact form island.
- API route validates and inserts row with timestamp.
- Admin views queue under dashboard admin section.
Review habits
- Mark handled to avoid duplicate replies.
- Cross-link users to feed configuration docs when relevant.
- Escalate billing issues to Stripe subscription records.
Security
Rate-limit public POST endpoints at the edge. Admin list routes require admin group: see admin features and secrets hygiene.