Root Authority Separation · Absolute Control Plane

Local, hardware-gated, offline-capable release authority.

This plane is intentionally separated from the public site, user workspace, and admin studio. It is not a daily CMS panel. It is the hard governance surface for release sealing, hardware gate evidence, and forbidden trust-anchor mutation proof.

Admin cannot signUser cannot escalateOnline trust mutation blockedHardware gate required

Local only—

Token configured—

Hardware gate—

Online signingblocked

Status Contract

Loading…

Offline Release Seal

token + hardware gate

Root token header Release label

No action.

Root Event Lineage

sealed chain

No events.

Trust Anchor Mutation Firewall

expected rejection

Online trust-anchor mutation is forbidden. This button exists to prove that the control surface fails closed even when the UI tries to mutate a sensitive authority.

Expected result: ONLINE_TRUST_ANCHOR_MUTATION_FORBIDDEN