A read-only view of the live nexus. This sign-in gates the page. It is not authority over any tenant — nothing here can enroll, revoke or mint anything.
Interim sign-in. This password is a placeholder until Cloudflare Access is configured for this path (WARP-91); it is here so the page is not open in the meantime, not because it is the intended door. Tenant keys live on an operator's own machine and never reach this server — a stolen session yields what an operator can already read and nothing that can change a tenant.