Supabase PostgreSQL and transactional outbox
Connected · Isolated hosted demoThe isolated demonstration uses a dedicated Supabase PostgreSQL database in Ireland with the application migrations and fictional school records. Cloudflare Hyperdrive connects the application using verified database TLS and uncached queries. Row-level tenant policies, scoped relationships and domain permissions remain part of the application. Cloudflare scheduled processing claims PostgreSQL outbox work with leases and retry handling for internal portal notifications and review tasks. Tenant-scoped transaction row locks preserve shared financial and operational coordination across pooled connections. The separate pg-boss worker remains available for native Node deployments; it is not run inside Cloudflare Workers. This demo is not evidence of production capacity, availability or a real-school pilot.
Amazon Cognito / OpenID Connect
Implemented · Production setup requiredThe production identity adapter uses authorization-code OIDC, PKCE, verified identities, revocable application sessions and privileged authenticator checks. A Frankfurt user pool, actual accounts, explicit school memberships, MFA setup and provider acceptance testing are still required. Demo role selection is restricted to fictional schools and never establishes production access.
Paystack school and applicant checkout
Implemented · Disabled in demoPer-school merchant credentials support student invoice and separate applicant-fee checkout, partial amounts, signed webhooks, independent provider verification and recovery of missed callbacks. Reference, amount, currency and school metadata are checked before financial posting. Genuine excess funds remain a student deposit or applicant credit. No live provider payment has been performed; demo schools are blocked even if keys are present. Actual bank/provider payouts and refunds remain authorised human actions recorded through the relevant workflow.
Amazon SES email and SNS SMS
Adapters implemented · Not enabledOutbox-driven email and SMS delivery require a non-demo school, explicit live flags, verified sender/account setup, AWS permission and the recipient's channel opt-in. School rules can delay or require approval before dispatch. Sensitive updates direct people to the secure portal rather than exposing private financial or clinical detail. No external email or SMS was sent; an accepted provider request is distinct from delivered or read communication.
WhatsApp Business / Meta Cloud API
Adapter implemented · Not enabledThe notification worker can use a configured Meta Cloud API sender with an approved utility template and recipient opt-in. Sender approval, access credentials, supported template/language settings and live acceptance testing remain necessary. Demo schools cannot send external WhatsApp messages, and the product does not claim free-form or unrestricted WhatsApp delivery.
Cloudflare R2 EU private documents
Connected · Isolated hosted demoThe hosted demonstration uses a private Cloudflare R2 bucket in the EU jurisdiction. Role, campus and linked-record authorization is checked before private documents are streamed through the application; they do not become public gallery images. The Cloudflare binding supplies the hosted demo file adapter, while the native adapter remains available for other deployments. School-specific retention policies, live document workflows and a complete cloud recovery rehearsal still require acceptance review.
Cloudflare Workers and OpenNext
Hosted · Isolated fictional-school demoOpenNext adapts the Next.js web application to Cloudflare Workers at schoolos.oyibo.com.ng. The demo connects the Lagoon Heights public website and five role-based workspaces, with Cedar available as a second fictional school. Cloudflare Hyperdrive connects to Supabase PostgreSQL, which stores the application records and private EU R2 storage holds documents. A five-minute Cron Trigger processes the demo transaction outbox and scheduled workflows. External email, SMS, WhatsApp and live Paystack checkout remain disabled. Native Node deployment and encrypted backup/restore scripts are retained, while hosted capacity checks, provider acceptance and a complete recovery rehearsal remain rollout work.
Pilot delivery and the next phase
Public demo · Real-school pilot pendingThe isolated public demonstration makes the fictional school website and role-based workspaces available for exploration and further pilot validation. Oyibo setup can cover school branding and content, domain preparation, validated imports, academic and fee settings and role-based onboarding. A real-school release requires provider acceptance, opening-balance reconciliation, independent Nigerian accounting/payroll and privacy reviews, hosted capacity checks and an executed recovery drill. The current English CMS uses structured forms: block type/title/body are editable, while complete visual block controls, some surrounding website copy and editing existing programme titles/descriptions need further work. Staff arrange admissions appointments; a public booking calendar and automatic timetable generation are not included. Native Android/iOS, online examinations, live/video classes, GPS and biometric devices are separate future work. No completed real-school pilot or statutory certification is claimed.