Access
Enrolled operators only.
There is no public sign-up. Accounts are created by an administrator or owner, enrolled with TOTP, and signed in with password plus a fresh authenticator code.
Signing in
- Open the workspace sign-in page.
- Enter your username and password.
- Enter the current 6-digit authenticator code. Codes cannot be replayed.
- On success you land in the Overview of the secure workspace.
Roles
| Role | Can do | Cannot do |
|---|---|---|
| Owner | Policy, providers, backup plan, all legitimate cases, create owners | Bypass runtime safety gates or host root controls |
| Admin | Manage users and workspace case access | Owner-only control center actions |
| Operator | Work owned or shared cases; research; recovery when gated | Manage global users or owner policy |
| Auditor | Review authorized cases, reports, and audit events | Mutate recovery state or intake |
Account recovery
If you still hold one factor, use account recovery with an unused offline recovery code:
- Lost password — username + authenticator code + recovery code + new password.
- Lost authenticator — username + password + recovery code → new TOTP enrollment.
Successful recovery revokes existing sessions. Recovery codes are single-use and should be stored offline — never in chat or screenshots.
What guests can see
This public site explains the product. The workspace itself remains behind MFA. Health endpoints are separate and token-protected where configured.
Authorized entry