EVE SSO Pilot
EVE SSO Pilot Readiness
This public mirror shows whether WarpIntel is ready for the first controlled EVE login test. It uses only public-safe counts, public route labels, proof outcomes, and no-secret safety checks. The actual owner packets, credentials, tokens, sessions, account payloads, provider setup, and private EVE data stay outside this page.
Ready for controlled login.
0 gate(s) block the first controlled login test.
2 step(s) still need review before execution.
Every target is listed as no OAuth and no private data from this public view.
0 account launch gate(s) still block the pilot.
Feature-specific consent plans stay preview-only until a user asks for that feature.
Route, rollback, and account-control checks remain part of the pilot gate.
No protected admin routes, secrets, tokens, cookies, or private account data are exposed.
Account launch packet ready
Public-safe evidence is present for this pilot gate.
- Public Evidence
- /eve-sso-launch
Launch gate owner review safe
Public-safe evidence is present for this pilot gate.
- Public Evidence
- /eve-sso-launch
Auth flow handoff
Public-safe evidence exists, but controlled-login approval still needs review.
- Public Evidence
- /eve-sso-readiness
Feature flag owner switch
Public-safe evidence exists, but controlled-login approval still needs review.
- Public Evidence
- /eve-sso-launch
publicData first-login scope
Public-safe evidence is present for this pilot gate.
- Public Evidence
- /permissions/preview?scopes=publicData&returnTo=/dashboard
Callback and credential presence
Public-safe evidence is present for this pilot gate.
- Public Evidence
- /eve-sso-readiness
Proof targets ready
Public-safe evidence is present for this pilot gate.
- Public Evidence
- /api/auth/eve/readiness
Rollback decision points ready
Public-safe evidence is present for this pilot gate.
- Public Evidence
- /eve-sso-test-plan
Live-smoke checklist ready
Public-safe evidence is present for this pilot gate.
- Public Evidence
- /status
Account data-rights controls ready
Public-safe evidence is present for this pilot gate.
- Public Evidence
- /data-rights
Review protected packets
This runbook step can be reviewed from public-safe evidence.
- Public Route
- /eve-sso-launch
Confirm publicData preview
This runbook step can be reviewed from public-safe evidence.
- Public Route
- /permissions/preview?scopes=publicData&returnTo=/dashboard
Enable the feature flag only for the controlled run
This runbook step is staged but should not be executed until owner approval.
- Public Route
- /eve-sso-launch
Run one publicData login test
Run only after callback, credentials, feature flag, and owner review are ready.
- Public Route
- /api/auth/eve/login?returnTo=/dashboard
Verify logout, disconnect, export, and delete guards
This runbook step can be reviewed from public-safe evidence.
- Public Route
- /data-rights
Run production live smoke and record tracker evidence
This runbook step can be reviewed from public-safe evidence.
- Public Route
- /api/health
EVE SSO readiness JSON
Returns public-safe setup counts and keeps live sign-in locked until required gates pass.
- Route
- /api/auth/eve/readiness
- Safety
- No OAuth, no private data
Session status guard
Returns a private no-store session boundary without exposing account payloads.
- Route
- /api/auth/eve/session?returnTo=/dashboard
- Safety
- No OAuth, no private data
Login gate check
Stays locked until the feature flag, callback, and runtime credentials are approved.
- Route
- /api/auth/eve/login?returnTo=/dashboard
- Safety
- No OAuth, no private data
First consent preview JSON
Shows the first-login consent preview without redirecting to CCP.
- Route
- /api/auth/eve/consent-preview?scopes=publicData&returnTo=/dashboard
- Safety
- No OAuth, no private data
First consent preview page
Shows the user-facing first-login permission text before OAuth is available.
- Route
- /permissions/preview?scopes=publicData&returnTo=/dashboard
- Safety
- No OAuth, no private data
Callback state-failure guard
Rejects bad state proof without token exchange or private account reads.
- Route
- /api/auth/eve/callback?code=smoke&state=bad
- Safety
- No OAuth, no private data
Logout control
Responds through the protected account-control guard without exposing session values.
- Route
- /api/auth/eve/logout
- Safety
- No OAuth, no private data
Disconnect control
Keeps disconnect behind the protected account-control guard.
- Route
- /api/auth/eve/disconnect
- Safety
- No OAuth, no private data
Account export guard
Keeps account export private and unavailable to anonymous public traffic.
- Route
- /api/account/export
- Safety
- No OAuth, no private data
Account delete guard
Keeps destructive account actions gated and unavailable to anonymous public traffic.
- Route
- /api/account/delete
- Safety
- No OAuth, no private data
Public Boundary
Public EVE SSO pilot readiness exposes aggregate gate counts, public route labels, no-secret runbook labels, account-control guard labels, and proof target outcomes only. It does not expose client credential values, EVE tokens, cookie values, session payloads, private EVE data, account payloads, provider credentials, raw logs, protected admin packet bodies, or separate-project account details, and it does not start OAuth, exchange tokens, mutate sessions, call EVE or CCP, write database rows, run account export, run account delete, disconnect an account, or log a user out.