Room — System Architecture
Mobile Client (iOS-first, React Native) | | API Layer / Edge Functions | | Postgres Database (with RLS) | | Storage (Media) | | External Services
- Phone OTP provider
- Selfie verification provider
- Ad network
- Subscription provider
- Phone OTP
- Session management
- Age validation
- Profile CRUD
- School selection
- Mode toggling
- Verification status
- Swipe stack generation
- Filter enforcement
- Dealbreaker enforcement
- Block filtering
- Thread creation
- Routing logic
- Shared-school enforcement
- Enforcement checks
- Delivery + read state
- Shared-school filtering
- Ranking computation
- Activity scoring
- Reporting intake
- Enforcement actions
- Visibility suppression
- Engagement gate evaluation
- Ad frequency logic
- Placement injection
Must be enforced server-side:
- Shared-school messaging gate
- Enforcement state checks
- Block visibility rules
- Ads gating logic
- Ranking logic
Client-side validation is insufficient.