SaaS Launch Kit

What you get

• →Six linked skills covering the full SaaS foundation
• →Multi-tenant Postgres schema with row-level security
• →Pre-written architecture decision records for the big choices
• →Role and permission matrix template
• →Production launch checklist and eval prompts

Skills in this pack

• audit-log-engineer131 lines

  Designs tenant-scoped, append-only audit logs: actor, tenant, action, target, before/after diff, IP, user agent and request ID, tamper evidence with an optional hash chain, retention, PII handling and a customer-facing audit log UI. Use when adding audit trails, preparing for SOC 2 or enterprise security reviews, or building admin and support tooling.

• auth-roles-engineer145 lines

  Implements SaaS identity and authorisation: sessions vs JWT, invitations, membership-scoped roles, permission-based RBAC, last-owner protection, MFA and passkeys, SSO/SAML and SCIM, account recovery, audited impersonation and session revocation. Use when building sign-in, invites, team roles or support tools, or fixing privilege and session bugs.

• multi-tenancy-engineer135 lines

  Implements tenant isolation for shared-schema SaaS on Postgres: tenant_id everywhere, composite indexes, row-level security with per-transaction context, pooler-safe settings, tenant resolution, cross-tenant tests, per-tenant limits, export and deletion. Use when adding organisations or workspaces, enabling RLS, or investigating data leaking between customers.

• onboarding-activation-engineer118 lines

  Designs and instruments SaaS onboarding that drives activation: activation event, time-to-value, first-run flows, empty states with sample data, checklists, progressive profiling, behaviour-triggered lifecycle emails and funnels, without dark patterns. Use when building sign-up and first-run experiences, improving trial conversion or adding product analytics.

• saas-foundation-architect111 lines

  Orchestrates the SaaS foundation: order of work, key decisions recorded as ADRs (tenancy model, auth provider), which sibling skill to use when, and launch readiness. Use when starting a new B2B or B2C SaaS, adding organisations or teams to an existing app, choosing tenancy or auth approaches, or preparing for launch.

• transactional-email-engineer111 lines

  Builds reliable transactional email: SPF, DKIM and DMARC rollout, separate sending subdomains, queued sending with retries and idempotency, bounce and complaint suppression, templates with plain-text parts, localisation and signed expiring links. Use when setting up email sending, fixing mail landing in spam, or adding verification, reset or invitation emails.

Tested against

Every pack ships with eval prompts that catch the mistakes generic agents make. A few of the 15 scenarios:

• →Adding teams to a single-user app
• →RLS with a connection pooler
• →Tenant ID from the client
• →Tests that always pass
• →Role checks

Inside the ZIP

• LICENSE.md
• README.md
• evals/cases.md
• skills/audit-log-engineer/SKILL.md
• skills/audit-log-engineer/templates/audit-log.sql
• skills/auth-roles-engineer/SKILL.md
• skills/auth-roles-engineer/templates/permission-matrix.md
• skills/multi-tenancy-engineer/SKILL.md
• skills/multi-tenancy-engineer/templates/tenant-schema.sql
• skills/onboarding-activation-engineer/SKILL.md
• skills/saas-foundation-architect/SKILL.md
• skills/saas-foundation-architect/templates/adr-001-tenancy-model.md
• skills/saas-foundation-architect/templates/adr-002-auth-provider.md
• skills/saas-foundation-architect/templates/adr-template.md
• skills/saas-foundation-architect/templates/launch-checklist.md
• skills/transactional-email-engineer/SKILL.md

Checking access…