Operator sign-in

This view requires an enrolled passkey. Browser visitors never inherit a server or environment token.