Proof LaneSign in
Supabase env blockedReal auth, no mocks

Sign in to your control surface

Real Supabase auth, scoped to the web/admin proof lane. Tenant modules stay off the table until the hosted proof gates are green.

Email and password

env blocked

Only the public Supabase URL and publishable key are sent to the browser. No service-role secret reaches this page.

Public Supabase environment is missing. Configure it before signing in.

scopePassword recovery, magic links, SSO, MFA, legal gates, and company bootstrap remain separate hosted-proof work.
Cookies are issued by Supabase Auth and used only for the proof shell's server session read.
Proof boundary

No tenant modules, billing, analytics, or admin actions are wired up. This route only proves the secure sign-in path.

Proof statusAdmin gate