ak®
Back to selected work

PROJECT / COORDINATION PLATFORM

StageSafeUK

Helping performing organisations and licensed child-performance chaperones coordinate shifts, bookings and attendance, with clear responsibilities at every step.

Svelte 5 / SvelteKitTailwind CSSLaravel 13PHPMySQLPHPUnit

Pilot · England only. StageSafeUK coordinates people and records; it does not license chaperones, check DBS certificates or approve performances.

The product

StageSafeUK connects dance schools, theatres, festivals and production companies with chaperones seeking work. Its purpose is to make the operational journey clearer: define shifts, find available people, review applications, make offers and retain a useful attendance record.

Three roles, distinct responsibilities

The service gives each role an appropriate workspace and makes the boundaries of platform checks visible.

Event organisers

Create an organisation, draft events with multiple dates and times, search visible chaperones, shortlist candidates, invite applications, make offers and confirm bookings. Organisation review gates publishing and contact.

Chaperones

Maintain a profile, issuing-council information and availability; browse shifts, apply, accept or decline offers and review bookings. Choosing unavailable hides the profile from search.

Reviewers

Review organisations, suspend or reinstate profiles, handle safeguarding reports and inspect the audit log. Authenticator verification is mandatory for this role.

Operational records

Clash checks support booking decisions. Check-in/out and minimised CSV exports provide an attendance trail without collecting children’s personal records.

Trust through explicit states

The interface avoids a single “verified” badge that could imply checks the platform has not performed. Evidence-state labels explain whether information was supplied by a chaperone, expired, suspended or withdrawn. Organisers remain responsible for checking documents before booking.

Minimise sensitive data

The documented service excludes child names, dates of birth, medical records, DBS numbers, licence numbers and uploaded identity documents.

Guidance with provenance

Public supervision guidance and a council-based planning calculator link figures to published sources. Planning estimates are presented as estimates rather than approval of an event’s staffing.

Reporting and oversight

A safeguarding reporting route includes an anonymous option. Reports are restricted to reviewers; important actions enter an append-only audit trail.

A full-stack architecture

A static SvelteKit frontend communicates with a Laravel REST/JSON API under /api/v1. This separates a responsive browser experience from server-side authorisation and persistence, with PHP and MySQL powering the backend.

Swappable persistence

Controllers depend on a Store interface. JSON document storage supports local development and testing; a MySQL store supports the hosted service with the same domain fields.

Passwordless access

Single-use emailed codes support sign-in, with expiry, attempt limits, resend controls and rate limiting. Responses avoid exposing whether an account exists.

Role-aware security

Signed revocable sessions and deny-by-default endpoint checks enforce organisation boundaries and reviewer privileges. Optional two-factor authentication (2FA) lets users add an authenticator app for additional account security. Time-based one-time passwords (TOTP) are supported, with recovery codes and replay protection.

Build and deployment

GitHub Actions builds the static frontend and API release for encrypted FTP deployment. Runtime configuration stays on the server rather than in public frontend assets.

Design and verification

The product uses readable DM Sans typography, responsive layouts, visible responsibilities and large form controls. Keyboard-usable patterns are implemented; formal accessibility review remains a separate launch activity.

Recorded feature tests

The current project overview records 35 PHPUnit feature tests against JSON and MySQL storage. Coverage includes organisation isolation, role gates, booking clashes, publication checks, minimised exports and session revocation.

Pilot boundaries

The service remains a pilot with wider-launch work covering safeguarding ownership, legal/document review, accessibility and security assessment. The portfolio describes implementation and recorded checks rather than certifying the service.

Explore the project

Visit the StageSafeUK pilot See how it works Discuss the project

Based on the StageSafeUK project overview dated 25 October 2026 and the public pilot website. Product status and verification results are recorded snapshots, not new tests performed for this portfolio.