What ports as-is
- Config-seed-before-flip sequencing across every environment
- Audience and origin logic extracted out of startup code, independently assertable
- An activation test suite that fails on a silent revert
- A signed-in browser tab's access token decoded to localize an auth fault
What we build for you
- The tenant, its app roles and its branding



