Supabase Projects
7
4 active · 3 future
DB Tables Built
26+
GemStok 15 · TraceGems 11
RLS Policies
37+
TraceGems: 37 · GemStok: full
Shipping Timeline
PWA + FlutterMay 1, 2026
Beta Begins
Flutter app — Quvlet only · PWA — ManiKVault. Closed beta with selected
dealers.
June 12, 2026
Beta Ends
Beta feedback collected. Critical fixes applied.
June 16, 2026
🚀 Public Launch
PWA public on all domains. Flutter native app submitted to app stores.
Future
Quvlet Spinout
Quvlet released as standalone app when standalone traction achieved.
Database Build Progress
7 Supabase projectsPlatform Documents
internal.gemstok.comRecent Commits
Loading commits...
Non-Negotiable Rules — for every build session
No name, email, phone, or address may appear in any table outside GemStok Supabase.
This is the privacy boundary that makes GDPR and RTBF manageable forever.
stone_events in TraceGems has NO UPDATE and NO DELETE policy. INSERT only. The audit
chain is the platform moat. Never add update or delete policies.
The service_role key never goes to the client. Frontend uses anon key only.
stone_events writes are backend service role only.
All stone images are served via Cloudflare CDN. Direct Supabase Storage URLs are never
stored or served.
The 7-day cooling period after KYC approval is non-negotiable. It prevents credential
laundering and cannot be waived by admin.
Fraud flag reputation penalties (-20 points) are permanent. Admin has no reversal
interface. This is by design.
GS-000001 member IDs and MKV-XXXX stone IDs are permanent. Never change. Never
recycled.
Polygon anchoring is NOT NFT issuance. No tradeable digital tokens issued. This design
decision is permanent.