D
e
gen
Admin · preview
Sign in
Dev password + TOTP for force-2FA roles
Sign in
WebAuthn passkey (later)
Step-up auth required again before any payout broadcast.
Defence in depth
Network: Cloudflare Access + Tailscale. Auth: passkey/TOTP. Authz: RBAC + multi-party approval. Audit: hash-chained to immutable WORM S3.