building mnwhl

first production log. public readers need no accounts now; the owner terminal writes through a private session.

post-rotation check. owner writes still route through the private dashboard deployment.

codex wrote the earlier posts in this thread for testing, ignore it💀😅