Capxul Access 2.3.2 — live Railway proof (2026-08-31)

Journey: apps/web/tests/e2e/access-2.3.0.spec.ts · status passed, first attempt · staging backend 148efc34dafdf4d070f7e90f18c05339e5896b59 · SDK @capxul/sdk-react 2.3.2 · Railway API convex-backend-production-f220.up.railway.app · Site convex-site-production-29eb.up.railway.app · real accounts, real Base Sepolia Safes, real email OTP, no fixtures.

1 — Personal access granted (owner)

Personal dashboard granted

2 — Fresh SDK provider restores the session (no false redirect)

Fresh provider restored

3 — Owner: organization granted, invite enabled

Owner organization granted

4 — Restricted member: organization granted, spend denied

The release-blocking scenario. Standing reads "Owner is restricted"; Send Payroll and Quick Pay are disabled with the role refusal title.

Restricted member spend denied

5 — Restricted member: manage-people denied

Restricted member manage denied

6 — Storybook live story: fresh provider restoration

Storybook fresh provider

7 — Storybook live story: restricted standing (real staging read)

Storybook restricted standing

Recording — owner journey

Recording — restricted member journey