Staff access

Staff sign-in

Two roles, one shared passphrase each. Signers do not sign in — they reach their order through the link they were sent.

Signing in as

Administrator

Runs the business. Pipeline board, revenue and identity-failure metrics, the journal and its chain check, retention deadlines, and the per-order evidence bundle.

Open entry is on for this deployment. Anyone who reaches this page can enter either console without a passphrase. The role phrases still work, and nothing else about the access model has changed — but the staff screens are not protected from whoever has the link. Turn it off by unsetting DEMO_ONE_CLICK_SIGN_IN.

Return to the overview · Verify a document — no account needed

Guide

How access works in this demonstration.

What the passphrase is
One shared phrase per role, set by whoever runs this demonstration. There are no individual accounts, no registration, and no password reset — a real deployment needs named users so the journal and the audit trail can say which notary did what.
Two roles · notary, administrator
The phrase decides, not the choice
Picking a console above only sets where you land. The passphrase you type is what determines your role — enter the notary phrase after choosing Administrator and you are signed in as a notary and sent to the queue instead. The system never grants a role because a page asked for it.
An administrator may also open the notary screens
Signers do not sign in
A signer reaches their own order through the link the intake form hands them. That link carries a long random code, and a wrong code gets the same "not found" answer as an order that was never placed — so the page cannot be used to discover whose orders exist.
No account · no password to lose