Controlled operator access
Consequential actions need attributable human sessions.
ADVOS stores a signed, HTTP-only session reference. Passwords are salted and hashed locally. This internal phase does not yet claim enterprise SSO or public multi-tenancy.
Operator sign in
Use a seeded internal-studio operator account.