Authentication

Public accounts are separate from member and admin roles.

Account Boundary

• Public sign-in does not grant member access.
• Member access is role-gated server-side.
• Admin access must not come from editable profile fields.
• Provider settings are operator-owned and outside public docs.