MODEL2 COMMERCIAL CONTROL AUTHORITY

Ruler Control Room

Authoritative commercial state. Client-reported online booleans are never trusted.

Deployments—Scoped authority objects

Critical—Non-active authority states

Security events—Recent authenticated events

AuthorityRULERCache is never authoritative

DERIVED AUTHORITY

Fleet overview

NO SESSION

Tenant / Deployment	State	Commercial	Lease / Generations	Integrity	Evidence	Controls

AUTHENTICATED DEVICE SIGNALS

Authenticate to load security events.

APPEND-ONLY AUTHORITY HISTORY

Authenticate to load audit records.

PHISHING-RESISTANT ADMIN AUTH

Operator UUID

Password-only privileged access is forbidden. Session and state-changing actions remain CSRF/origin/RBAC/generation checked.

ONE-TIME ENROLLMENT

Operator UUID Bootstrap token

The bootstrap token is stored server-side only as a SHA-256 digest, expires, and is single-use.

Authenticate with a registered WebAuthn credential. Administrative commands remain fail-closed.