Private control starts at the boundary.
This build uses a signed, HTTP-only development session and a tenant-scoped mock data adapter. Production identity is deliberately not configured.
No existing Verité website account, Supabase project, or runtime credential is used by this sign-in.