Demo And Staging User Safety

Staging review accounts must use sample/demo data only.

Recommended roles:

• Founder/Admin demo
• General Manager demo
• Operations/CRM demo
• Finance demo
• Engineer demo
• Store/Inventory demo
• Field Staff demo
• Viewer demo

Do not commit passwords. Store credentials in the staging secret manager or hand them to reviewers through an approved secure channel.

Optional Seed Support

Set these only in an untracked staging secret file or platform secret store:

SEED_STAGING_DEMO_USERS=true
SEED_STAGING_DEMO_PASSWORD=<temporary-12-plus-character-password>

The seed creates or updates these sample-only accounts:

• founder.demo@submicron.local -> Founder/Admin
• manager.demo@submicron.local -> General Manager
• operations.demo@submicron.local -> Operations/CRM Officer
• finance.demo@submicron.local -> Finance/Admin
• engineer.demo@submicron.local -> Engineer
• store.demo@submicron.local -> Store Manager
• field.demo@submicron.local -> Field Staff
• viewer.demo@submicron.local -> Viewer

Use a temporary seed password, then rotate or replace demo credentials through the approved staging credential process. Never reuse employee passwords.

Use sample/demo data until production data migration is explicitly approved.

Do not seed real customer data, real payment records, real private import files, or real external provider credentials.