Hosted Architecture
Consumer applications integrate through https://api.sweetpotato.dev. Application credentials
select the environment and application boundary; the same client integration can move from staging
to production by changing provisioned configuration.
Trust Boundaries
| Boundary | Rule |
|---|---|
| Browser | Use only a publishable key and an allowed origin |
| Consumer server | Keep the secret key in server-side secret storage |
| User session | Validate current session authority and route-specific application access |
| Staging | Use separate application credentials and synthetic/test data |
| Production | Promote with separately provisioned production credentials |
SPAPS hosting, persistence, migrations, deployment, and service operations stay behind the hosted service boundary. They are not consumer integration dependencies.