An iPad-first system for running a bespoke tailoring workshop: customers, dated measurement profiles, a garment configurator, B2B price lists, and the four-station production floor — Cutting, Assembly, Ready, Store — tracked by QR and NFC. The database is the security boundary rather than the app. The order tables are read-only to every client; every mutation goes through a function that re-derives the tenant from the token and re-prices from the catalogue, so a price sent by the client is ignored. Foreign keys are composite, which means a row cannot reference another workshop's row even with the policies switched off. Money is stored as integer minor units, never floats.