Core release
Railbase core v0.18.32
- Pin the workspace on session RESTORE, not only at password signin
- Baseline site
userrole rides the deliberate membership assignment - Retire the tenant scope — site + plugin roles only; DoA-safe migration
- Membership is operator-assigned — no signin auto-join, flat member role, email-first roster
- Trial relay sends the device fingerprint