Custody Approval Portal

Kustody

Google Workspace sign-in gates access. Active roles come from the S3 role manifest at login time.

Mock mode is enabled. External auth, WebAuthn, Postgres, S3, and Sodot are bypassed for local walkthroughs.