GET STARTED
Web Operations Console.
An authenticated administrative surface. It is not a public homepage.
Authentication
A bearer token is exchanged once for a short-lived server-side session. It is not stored in the browser; session and CSRF values are hashed on disk.
Recommended access
browser → SSH or Tailscale tunnel → 127.0.0.1:8765Do not automatically expose NAT, forwarding, public admin endpoints, or new tunnels.
Delegated services
- RBAC and policy simulation
- queue and worker
- reports, evidence, audit, trust, privacy, assurance
- permission-checked artifact resolution