Secret Elite isn't a store. It's a list. The product question wasn't 'how do we sell things' but 'how do we model a list of people who can see things, when they can see them, and from where.' We treated access as the first-class primitive — every other feature followed from it.

We bet the founder would become the daily editor and the engineering team would never need to be called for content. That meant the CMS had to be opinionated enough to prevent broken states, and flexible enough to model time-limited drops, region locks, and tiered visibility without ever touching code.

We modeled access as an explicit graph: invite codes belong to tiers, tiers grant capability sets, capability sets gate drops, drops have time windows and region locks. Every visibility check resolves through the same evaluator. There are no special cases in the codebase — there is one function that decides what a member can see.

Media is delivered through signed S3 URLs minted by Cloudflare Workers at the edge. URLs expire fast enough that they can't be shared, slow enough that legitimate sessions stay smooth. Nothing leaves S3 unsigned, ever.

The CMS is a thin Sanity Studio over the same access graph. The founder picks a tier, a region, a window, and uploads. The site updates on next ISR revalidate — no deploys, no engineer.

The first cut shipped without time-limited drops. We added them after the founder said the brand depended on scarcity. That change pulled three architectural decisions forward — visibility resolution had to handle time, the CMS had to expose schedule editing, and ISR had to revalidate at expiration.

We also reworked invite codes mid-build. The original design hashed and stored them server-side; the founder wanted a printable PDF voucher with a QR. We rewrote codes as JWTs signed by a key the founder controls — printable, scannable, revocable, and impossible to reuse across regions.

We launched on the day we wrote down on day one. Eleven weeks. Zero engineering tickets the first month after handoff. That last number is the one the founder remembers.