Canonical identity contracts
Microsoft, Google, GitHub, local TIGUNNY, and development identities map to one user model; provider identity never grants tenant access.
Separate application boundary · local review
Identity proves who. Policy decides what.
This first Conflux portal slice establishes the server-side seam for canonical identity, tenant membership, role decisions, sessions, and audit evidence—before any live provider or customer workflow is connected.
AUTH_BOUNDARY
deny / default
Identity ≠ authorization
What is real in this slice
A reviewable security foundation, not a simulated product.
Server-enforced tenant gate
Protected routes carry required permission metadata. Active membership and least-privilege roles are evaluated on the server for every request.
Auditable decisions
Local review records sign-in, sign-out, and allow/deny events behind a replaceable audit sink. Durable production storage remains a prerequisite.
Release posture
Configuration pending by design.
No OAuth client, local password store, MFA, recovery flow, customer tenant, billing system, external integration, DNS record, or production deployment is present. The development test identity is disabled and cannot be enabled outside the Development environment.