Authentication

Invite-only signup, owner keys isolated, public site marketing-only when closed.

Host provider keys and subscriptions are admin-only. Each account manages its own encrypted BYOK keys; non-admin text turns use /open-bot/byok/chat. Shared gateway execution is admin-only because child environment filtering cannot isolate gateway credentials. Account-scoped files, snapshots, attachments, data export/deletion and activity remain available. Public hosts can show “Closed for now” via the public-site script without killing the tunnel. Docs host chazakah.dev must stay on static docs, never the bridge closed page.