Publisher boundaries first.
Build around websites explicitly approved by the administrator. Hostname normalization, clear subdomain rules, and server-side site/unit checks are part of the planned access model.
- Website allowlist and status controls
- Explicit site-to-unit associations
- Fail-closed behaviour for unapproved sites
