Proof LaneSign in
Supabase env readyReal auth, no mocks

Sign in to your control surface

Real Supabase auth, scoped to the web/admin proof lane. Tenant modules stay off the table until the hosted proof gates are green.

Email and password

env ready

Only the public Supabase URL and publishable key are sent to the browser. No service-role secret reaches this page.

scopePassword recovery, magic links, SSO, MFA, legal gates, and company bootstrap remain separate hosted-proof work.
Cookies are issued by Supabase Auth and used only for the proof shell's server session read.
Proof boundary

No tenant modules, billing, analytics, or admin actions are wired up. This route only proves the secure sign-in path.