ZERO-TRUST OPERATOR PLANE
Identity chooses the tenant. Policy chooses the action.
Viewer
Read released facts, evidence, health, and audit summaries
Operator
Run approved sources and replay dead-letter deliveries
Reviewer
Resolve conflicts and review repair/router proposals
Admin
Manage members, API keys, source policy, and organization settings
HTTPS + approved public hosts
Credentials, loopback, link-local, private IPs, and unsafe redirects are rejected.
Evidence cannot become instruction
Page text is compacted, delimited, and prohibited from authorizing releases or repairs.
Recursive secret redaction
Keys, tokens, cookies, passwords, and private key material are removed before persistence.
VERIFYING SESSION