Secure operations login

Enter the control room.

Admin access stays separate from player sessions, with permission checks and audit context before operational actions open.

Separate access

Admin sessions never share player auth

Permissions

Operational routes check roles first

Audit ready

Approvals and credits write review evidence

Admin sign in

Verify operator access

Admin cookies are HttpOnly and scoped to admin API routes. Permissions are checked again before every operations page.