ONLYSOURCE

Operator workspace for defense parts dealers. This environment is not open to the public and holds no customer data yet.

A shared phrase held by the build team. It is not an account and it is not your identity. Real sign-in replaces it, and this door is then deleted rather than kept as a second way in.

What is this gate, and what does it protect

What it is. A single shared phrase that stands in front of a pre-release environment while the real identity layer is being built.

How it works. The phrase is compared on the server in constant time. A match issues a signed, HttpOnly cookie that expires after 12 hours with no sliding renewal. The pages behind it are never sent to your browser first and hidden with styling. If the phrase is wrong, the server renders this page instead.

Why it matters. A gate that hides content the server already sent protects nothing. This one refuses at the server, and it refuses by default: with no phrase configured, every request is denied rather than allowed.