System Administration & Zero Trust Cloudflare Access Protected

Identity-aware perimeter protection, Google Workspace SSO integration, and Cloudflare D1 relational database status.

Host: brain.martinmedia.us

🔒 Cloudflare Zero Trust Access Policy Specifications

Policy: Active

Identity Provider Google Workspace SSO @martinmedia.us domain

MFA Requirement Phishing-Resistant MFA Hardware Key / WebAuthn

Session Lifetime 24 Hours Strict Re-auth required daily

Server-Side JWT Check Cf-Access-Jwt-Assertion Validated on every API call

👥 Authorized Martin Media Identity Roster

Name & Title	Google Workspace Email	Access Scope	Status
Josiah Martin Founder & Executive Director	josiah@martinmedia.us	All Clients • Full Operator	Authorized
William Weinig Director of Creative Strategy	william@martinmedia.us	All Clients • Strategic & Commercial	Authorized
Alex DeGray Cinematographer & Post Supervisor	alex@martinmedia.us	Production Clients • Video Assets	Authorized
Cora Davis Marketing & Campaigns Manager	cora@martinmedia.us	Marketing Clients • Campaigns & VidLead	Authorized
Kevin Bennett Lead Web & Systems Engineer	kevin@martinmedia.us	Infrastructure, Edge APIs, D1 & Repos	Authorized

🗄️ Cloudflare D1 Database Explorer (mm-brain-db • 21 Tables)

PRD Section 10 Schema

organizations 1 records

Martin Media parent studio entity

users 5 records

Josiah, William, Alex, Cora, Kevin

roles 4 records

Guide, Assistant, Editor, Operator

clients 5 records

Cheeky, Polar Plank, Seward Heli, KPDI, Soldotna Dental

client_access 5 records

Role-based team client assignments

websites 5 records

Connected production web properties

github_repositories 3 records

Source-controlled client codebases

cloudflare_projects 3 records

Edge delivery projects

change_requests 4 records

Incoming content & code change proposals

deployment_events 4 records

Captured GitHub push/commit events

deployment_verifications 4 records

Cloudflare Pages API edge verifications

notification_preferences 5 records

Client 5-min batch rules

notification_batches 1 records

Consolidated batch windows

notification_deliveries 2 records

Resend transactional outbox records

knowledge_records 12 records

Verified business facts & guidelines

source_references 8 records

Evidence binding (Frame.io, Google Docs, Git)

approval_requests 1 records

Active governance review queue

obligations 4 records

Contract deliverables and film shoots

security_events 0 records

Security anomalies & prompt injection flags

audit_log 7 records

Immutable chronological action log

scheduled_job_health 4 records

Heartbeat monitors for background jobs