GET STARTED

Web Operations Console.

An authenticated administrative surface. It is not a public homepage.

Authentication

A bearer token is exchanged once for a short-lived server-side session. It is not stored in the browser; session and CSRF values are hashed on disk.

Recommended access

browser → SSH or Tailscale tunnel → 127.0.0.1:8765

Do not automatically expose NAT, forwarding, public admin endpoints, or new tunnels.

Delegated services

  • RBAC and policy simulation
  • queue and worker
  • reports, evidence, audit, trust, privacy, assurance
  • permission-checked artifact resolution