blockedhigh confidence2 sourcesfreshness high
Authentication
Public accounts are separate from member and admin roles.
Account Boundary
- Public sign-in does not grant member access.
- Member access is role-gated server-side.
- Admin access must not come from editable profile fields.
- Provider settings are operator-owned and outside public docs.