Passwordless sign-in, a second factor for sensitive actions, and every step written to a tamper-evident ledger.
You sign in with GitHub and your device's own identity — not a shared secret. There's no password to phish, reuse, or leak.
Add an authenticator app (TOTP) as a step-up factor. Sensitive actions — elevating access, changing a deploy rule, inviting or removing a teammate — prompt for that second factor right then, and the step-up is recorded in your audit ledger. A hardware security key (YubiKey) is optional, and required only at higher assurance tiers.
Each device carries a short-lived mesh certificate and an assurance level (AAL). The app shows both, so you always know what a session actually holds.
For a security or compliance reviewer, this is the difference between "trust us" and evidence: no stored passwords, step-up on sensitive actions, and a signed record of who did what.