Purpose
Dedicated customer product surface
Tenant users should land here after a signed launch handoff from the accounts application.
Managed runtime
Kriy Tenant
This domain receives signed launch handoffs from `accounts.kriy.ai`, mints a tenant session, and becomes the customer-facing runtime surface.
Auth boundary
Issued by accounts, validated by backend
Launches arrive with a short-lived signed token issued by `api.kriy.ai`, then become a local tenant session on this domain.
Production
Ready for deploy automation
This app ships with a health endpoint, GitHub Actions deploy workflow, systemd target, and nginx/certbot-friendly runtime shape.