0
Lines of source code
The Grounds gives every private club its own branded app and every member a clubhouse in their pocket. Underneath the simple surface is a relational core most software teams never bother to build. Here is what is in it.
Not a weekend prototype. A full application with two front ends, a serverless backend, and the file count to match.
A typical small-business website is a few thousand lines. This is a working product.
The part nobody sees and everybody depends on. This is where software either holds up under real use, or quietly falls apart.
Row Level Security decides who can see and touch each record. The Grounds applies it to all 51 tables so one club can never reach another club's data. Most teams skip this depth. It is the difference between multi-tenant done right and a data leak waiting to happen.
A real relational schema, not a pile of loose documents. Relationships are enforced by the database itself, so the data stays correct even when the app has a bad day.
Audit logging, lifecycle changes, and sync happen inside the database, in one place, instead of being copied across the app where they drift out of step.
Performance was designed in from the start, not bolted on after the app got slow. It stays fast as clubs and members grow.
Three full surfaces in one platform: the member app, the staff admin, and the multi-club control center behind both.
The cheap version works in a demo and falls over in the real world. This one was hardened on purpose.
Security pass with teeth. A dedicated hardening phase closed 21 findings across three review rounds: locked-down access, rate limiting, and audit logs.
Tests on what matters. 56 automated tests guard the things that fail silently and dangerously: permissions, sign-in gates, and cross-club access.
Zero TODOs in the codebase. Most production apps carry dozens of "fix later" notes. This one carries none. That is unusual cleanliness.
The database is version-controlled. Every schema change ships as a tracked file before it is applied. Nothing is changed by hand and forgotten.
Defense in depth. Access is checked in the app and again at the database, so a single mistake does not expose a club's data.
Already pressure-tested. Clinton Country Club is the founding club, so the design has met real operations, not just a slide deck.
Each phase shipped real, working capability. This is the order it was built in.