Task 001 Complete

EU AI Act readiness starts with a clean, secure foundation.

The app boots, connects to MySQL, runs Flyway migrations, and renders Thymeleaf pages with the shared design system already wired into the local Tailwind build.

Security

Permissive baseline ready for staged Spring Security rollout.

Database

Flyway creates `organizations`, `users`, and `audit_log` on first boot.

UI

Shared Thymeleaf layout and Tailwind-backed design tokens are in place.

Foundation status

Ready for auth and onboarding.

Schema

UUID-based tables model organizations, users, and audit events with JSON payload fields.

Templates

`layout.html` provides the shared head, typography, navigation, and content shell for future pages.

Next task

Signup and login screens can now layer on top of the same schema, styling, and route structure.