Technical design for broker-branded *.fairlend.ca portals where host resolution establishes canonical portal context, WorkOS auth restores the originating broker host, and authenticated borrower/lender access is enforced inside that host context.
fluent-convex middleware for portal resolution, membership enforcement, pricing projection, and filter clamping.