PURE · Identity & Access
One place for every sign-in, recovery, MFA and trust surface — its live status, its link, and the backend controls behind it. Status reads live from configuration; nothing here is hardcoded.
Sample status — live config not reachable from hereEvery login & security page in the ecosystem, grouped by lifecycle. Live = deployed · Staged = built, awaiting push · Demo = preview only. Click through to any surface.
Dynamic, edit-once controls wired to mcp_ui_settings_set — Cecile changes these from here and every surface picks it up with no redeploy. Sensitive flips (MFA enforcement, device limits, the gate) land next as reviewed change-requests.
The trust badge shown on sign-in / reset. Edit once here; it updates everywhere via ui.seal.
The merged brand-icon sprite every page loads. Point it at an updated pack to swap icons site-wide, no redeploy (ui.icon_pack).
Applies to every signed-in session. Reads live from ui settings; saving updates the Devices surface, idle sign-out, and password reveal everywhere.
Two-factor is sensitive — an org-wide flip can lock out staff without a factor enrolled, so this is a reviewed change-request, not a direct toggle. Submitting relays to Code + Mike with the current basis; they flip it at the auth window.