{
  "schema": "unitiqx.orbit.identity-boundaries.v1",
  "generated_utc": "2026-10-11T08:44:36.780457+00:00",
  "current": {
    "owner_private_login": "Exists in authenticated PRIME Workbench on a separately secured origin",
    "anonymous_public": "Read-only browsing plus bounded, quota-capped public recipe requests",
    "public_user_accounts": "NOT_DEPLOYED",
    "sso": "NOT_DEPLOYED",
    "passkeys": "NOT_DEPLOYED",
    "multi_tenant_rbac": "NOT_DEPLOYED"
  },
  "security_acceptance": [
    "Session rotation and revocation",
    "Secure cookie flags and CSRF control",
    "Passwordless/passkey recovery and MFA",
    "Brute force and abuse controls",
    "Cross-tenant isolation tests",
    "Audit and data-retention rules",
    "Independent review before general signups"
  ],
  "policy": "Never render a mock sign-in as working identity; do not expose owner admin or private warehouse."
}