Operator console
Scaffold is live. Cloudflare Access validated your identity before you saw this page.
What's here today
- Skeleton Flask + Jinja2 + HTMX + Tailwind app deployed to Heroku
- Gated by Cloudflare Access (email OTP, 24h session)
GET /healthliveness probe
Coming next (in order)
- DB schema — admins, roles, sessions, passkeys, TOTP seeds, audit log
- Bootstrap CLI:
python -m console.bootstrap --email [email protected] - WebAuthn passkey + TOTP second factor
- RBAC middleware (superadmin / ops / support / readonly)
- Secrets rotation dashboard (consumes Infisical)
- Founders cohort admin view