SEV-2: blocks launch

Admin access is decided in the browser

What goes wrong

Someone opens dev tools, changes one value, and becomes an admin.

Store roles in the database and check them on the server for every protected action. Treat anything in the browser as user input.

npx sigship

Run it in your project. It reports this check as role-in-local-storage, along with 16 others. Nothing leaves your machine.