Architecture
AttribGate runs on Cloudflare Workers with PostgreSQL via Hyperdrive. Tenant identity comes from the authenticated Shopify session - never from client-selected tenant IDs.
Encryption
Affiliate network credentials are encrypted at rest (AES-GCM). TLS is required for database connections.
Writeback safety
Network writeback is off by default after connect or credential replacement. Each approve/decline requires explicit merchant confirmation.