Mostly Apps Console

Operator hub shell. Holds zero credentials by design.

Who am I

No Access identity present (local dev). In production, Cloudflare Access injects the Cf-Access-Jwt-Assertion header on every proxied request.

Identity shown is decoded for display; each spoke verifies independently.