Operations Platform

Access policy: No public registration, no social sign-in, and no forgot-password flow in this milestone.

Security: Username and password are verified here, then Google Authenticator completes the second step.