Private cockpit

Application sign in

Vercel deployment protection remains the outer Preview gate. Google verifies your identity, and the Cockpit assigns the approved server-side role required by the read-only BFF.