Operator access
One password, and nothing else to break in through.
There is no account system behind this gate — just a password the owner holds, and a session while it lasts.
- No accounts table — no row to leak, no user to enumerate.
- Ten attempts an hour, then a wait — the only limit here guarding a secret rather than a table.
- A session that times out the moment it sits idle.