Phase 1 · secure tenant foundation
Publishing operations, with the boundaries made explicit.
ContentOS now includes verified accounts, optional authenticator 2FA, isolated site memberships, fine-grained roles, validated custom domains, and an immutable audit base.
Control plane
Safe by default
Tenant boundarySite
Unknown hostsRejected
External actionsDisabled
Support accessAudited
Identity
Verified and recoverable
Email verification, rate-limited login, password reset, secure sessions, and optional 2FA.
Tenancy
Cross-site access denied
Memberships, route binding, policy checks, jobs, and generated keys carry the site boundary.
Accountability
Authority leaves a trail
Role changes, domains, invitations, account events, and support sessions are auditable.