Owner: Jonathan (Founder) + Robert (Eng) · Department: Executive/Engineering · Status: Live · Version: 1.0
Effective Date: 2026-06-13 · Last Reviewed: 2026-06-13 · Next Review Date: 2026-09-13
Source of Truth: code audits + live Railway/Netlify inventory · Maturity: 4 (Operational)
The single source-of-truth map for the whole HempDash ecosystem. Inherits from the Operating Model. Items marked (inf.) are inferred from name/role/infra, not deep-audited.
| Repo | URL | Purpose | Stack | DB | Auth | Status | Source of truth | Writes ComplianceAuditLog | Demo risk | Owner |
|---|---|---|---|---|---|---|---|---|---|---|
| backend | api.gethempdash.com | compliance truth API | FastAPI/Postgres/Celery | FastAPI Postgres | Auth0 (4 audiences) | prod | YES (compliance) | YES | low | Eng |
| vendor-portal | store.gethempdash.com | vendor Compliance Seal surface | Next.js (Netlify) | none (reads FastAPI) | Auth0 vendor | prod | no — reads FastAPI | via API | medium | Product |
| customer-app | app.gethempdash.com | commerce + trust surface | Next.js (Netlify) | none (reads FastAPI) | Auth0 customer | prod | no — reads FastAPI | via API | medium | Product |
| hempdash-automation | internal (Railway) | COS / FDP / approvals / Loud Dept | Next.js + Prisma | own Prisma Postgres | Google @gethempdash |
prod-internal | YES (ops/FDP/marketing) | no | medium | Ops |
| hempdash-ops-dashboard | ops.gethempdash.com | delivery-ops admin | Next.js 15 (Netlify) | own Prisma + proxies FastAPI | Auth0 internal (6 roles) | prod | no — proxy + own DB | no (reads backend audit-logs) | high (mock training/alerts/security-log) | Ops/Eng |
| affiliate-portal | (none — prototype) | referral / commission | Next.js | none (reads FastAPI partners) | Auth0 | prototype — route seam broken | no — reads FastAPI | no | low | Growth |
| courier-portal | drive.gethempdash.com | driver / courier app | Next.js (Netlify) | none (reads FastAPI) | Auth0 driver (inf.) | prod (inf.) | no — reads FastAPI | no (inf.) | medium | Field Ops |
| wiki (Wiki.js) | wiki.gethempdash.com | docs / SOP / evidence layer | Wiki.js (Railway) | own Postgres | Wiki.js local | prod | YES (doctrine/SOP) | no | low | Ops |
| Repo | URL | Purpose | Source of truth | Demo risk | Owner |
|---|---|---|---|---|---|
| eta-service | Railway hempdash-eta |
delivery ETA computation | supports backend | low | Eng |
| search-indexer / hempdash-algolia-indexers | Railway hempdash-algolia |
product/vendor search index | indexes FastAPI data | HIGH — could index recalled/demo/inactive products | Eng |
| cms | cms.gethempdash.com | blog/content CMS (Sanity-backed) | content | low | Content |
| website / hempdash-landing | gethempdash.com | public marketing site | marketing | medium (public claims) | Marketing/Loud Dept |
| coming-soon | (Netlify) | pre-launch placeholder | n/a | low | Marketing |
| hempdash-resource-directory | resources.gethempdash.com | public resource directory | content | low | Content |
| hempdash-field-ops | (Netlify) | field-ops tooling | ops | low | Field Ops |
| hempdash-execos (api/ui/execution-os) | hempdash-execos.netlify.app | execution-OS experiment | internal | low | Ops (inf.) |
| hempdash-chat (-api/demo) | Railway hempdash-chat |
chat/support experiment (inf.) | internal | low | Eng |
Core apps: hempdash-backend (FastAPI compliance API) · hempdash-automation (COS) · hempdash-wiki (Wiki.js+Postgres) · hempdash-eta (ETA) · hempdash-execos · hempdash-chat
Self-hosted tool suite (the SaaS-replacement stack): hempdash-chatwoot (customer support) · hempdash-mattermost (internal comms + bots) · hempdash-docuseal (e-signature — MVA/SAFE signing) · hempdash-calcom (scheduling) · hempdash-formbricks (surveys/feedback) · hempdash-n8n (workflow automation) · hempdash-postiz (social scheduling) · hempdash-appflowy / hempdash-nextcloud / hempdash-anythingllm (internal docs/files/AI) · hempdash-sso (auth) · hempdash-algolia (search)
Observability/analytics: hempdash-observability (Grafana/Loki/Tempo/Prometheus) · hempdash-signoz · hempdash-glitchtip (errors) · hempdash-uptimekuma (uptime) · hempdash-matomo / hempdash-umami / hempdash-posthog (web analytics) · hempdash-metabase (BI)
Other/SaaS-replacement: hempdash-docs
⚠ Likely NOT HempDash (verify/separate billing): superb-hope, meticulous-insight, bookacuddle, pact-science-staging, pact-science-prod — and the personal project group (ravishing-creation, patient-intuition, chic-determination, passionate-victory). These appear unrelated to the HempDash OS; confirm and don't count them in the ecosystem.
Product (custom domains): customer-app → app.gethempdash.com · vendor-portal → store.gethempdash.com · ops-dashboard → ops.gethempdash.com · courier-portal → drive.gethempdash.com · landing → gethempdash.com · blog-cms → cms.gethempdash.com · resource-directory → resources.gethempdash.com · website · coming-soon · field-ops · execos
Pitch/marketing assets (peripheral): investor-deck · advisor-deck · diligence-deck · data-room-investor · press-deck · press-kit · vendor-deck · speaker-notes · jonathan-portfolio (jonathanksullivan.com)
Project-URL aliases: extraordinary-jelly-de4461 (= customer-app project), venerable-platypus-433504
| Domain | System of record | DB |
|---|---|---|
| Compliance evidence (seals, COA, recall, NOV, audit log) | backend | FastAPI Postgres |
| Vendors (live, transacting) | backend (Vendor) |
FastAPI Postgres |
| Customers + identity | backend (User, IdentityVerification) |
FastAPI Postgres |
| Orders / payments / payouts | backend | FastAPI Postgres |
| Drivers / delivery | backend | FastAPI Postgres |
| Support tickets | backend (support_ticket) + Chatwoot |
FastAPI Postgres / Chatwoot |
| Affiliate referrals / commissions | backend (Affiliate/Referral/partner) |
FastAPI Postgres |
| Vendor-acquisition / FDP pipeline / approvals | automation | automation Prisma |
| Loud Dept marketing content | automation (LoudDept*) |
automation Prisma |
| Grants / funding / CRM (ops-dash) | ops-dashboard | ops-dash Prisma |
| Training metrics (ops-dash) | ops-dashboard (simulated/in-memory — not authoritative) | in-memory |
| Documentation / SOP / doctrine | wiki | wiki Postgres |
| Product search index | Algolia (derived from backend) | Algolia |
Three production databases own real data: FastAPI Postgres (compliance truth), automation Prisma (ops/FDP/marketing), ops-dashboard Prisma (grants/CRM). Wiki has its own Postgres. Self-hosted tools (Chatwoot/Mattermost/etc.) each have their own store.
They should link, not merge. Events that should flow into the FastAPI ComplianceAuditLog because they touch compliance claims, vendor status, audits, approvals, or public content:
Events that should stay in their own DB (NOT the spine): internal task/standup data, grant pipeline, CRM notes, marketing drafts pre-approval, scheduling. Mechanism: a thin outbound event write (HMAC) from automation/ops-dash into the backend's internal_compliance_events endpoint, keyed by shared vendor_id/product_id. This is the bridge from 'several apps' to 'one ledger of record'.
Several strong systems federated at the FastAPI seam — converging toward one OS, not there yet. The compliance ledger is single-source (good). The fragmentation risks to close:
User, vendor VendorUser, driver, ops Auth0 roles, affiliate partner) across 4 auth surfaces. Needs a canonical identity-mapping layer so one vendor/customer is traceable across all apps by a shared key.is_demo flag anywhere; Algolia search + public verify could leak demo/recalled data (gap registry P1 #9). Highest trust risk.The canonical move: keep the FastAPI backend as the ledger of record, make every other app link compliance-relevant events to it by shared entity IDs, add an is_demo/tenant flag everywhere, and route all public claims through Loud Dept.
Operating Model · Authority Boundary · Portal Map · Platform Gap Registry · Home