Sandbox available · Production unavailable

Identity is not auction authority

Authentication answers who is using the Platform. Authorization still has multiple explicit boundaries before a command can affect a Lot.

01User session

Proves a current Platform identity.

02OAuth grant

Names one Workspace, Environment, audience and scope.

03Platform policy

Rechecks current membership and suspension.

04Engine authority

Validates the tenant credential or signed operator decision.

Three credentials, three jobs

Credential	Custody	Authority
Browser session cookie	Hosted BFF; opaque to JavaScript	Current Platform session only
Platform OAuth grant	BFF today; future CLI/MCP host under their release profiles	Exact Platform resource, context and scopes
Ledgero service credential	Tenant backend or sealed Platform custodian	Engine administrative calls within its explicit scopes