Consulting OS
Phase 0 establishes auth, tenant context, service boundaries, and remote access. The shell is designed to run on your Windows host while the core backend services live in Docker.
Private-first access
Tailscale is the default remote path until the shell is stable enough for public ingress.
Bootstrap credential
Use the seeded owner account, then rotate the default password immediately after first sign-in.
Use the seeded owner account to access the Phase 0 workspace shell. Replace the default password after bootstrap.