Insights
Engineering notes and platform write-ups from the Lummet team.
Default-deny access for Lummet staff
New staff accounts start with nothing. Access is granted per brand and per action.
ReadHow signed requests between Lummet and its brands work
Every call carries a timestamp, a one-time value and an HMAC signature over the request.
ReadWhy the control plane never reads a tenant's database
Keeping management and content apart is what lets each brand stay independent.
Read