adversarial-readiness · operator console

HMAC-signed session cookie (12h). Zero Trust Access becomes the outer layer later.