Hardened boundary
Tenant workspaces live under `/admin`. Platform operators sign in here.
BKV Platform
Control Plane Access
Separate operator-only entry point for tenant lifecycle, platform settings, and control-plane operations.
EnvironmentPlatform control host
ScopePlatform only
AccessAudited
Privilege model
Every write path is intended to land in `platform_audit_events` with actor attribution.
Restricted
Operator sign-in
Use your platform account. Tenant admins should return to the standard workspace login.
Tenant admin or brokerage user? Use the standard sign-in.