Users & Access

Per-user Unix accounts. Each user's SSH session and their dashboard/IDE agent run under their own uid (OS-enforced scope): admins get open scope; an operator scoped to a client is OS-denied every other client.