{ "status": "passed", "checks": [ "Edge matches only the exact company prefix", "Bare company path canonicalizes and anonymous access reaches prefixed login", "Prefixed CSS and JavaScript load and render the login controls", "Real CSRF login, cookie scope and dashboard navigation stay within the tenant path", "Password-change navigation and CSRF logout preserve the prefix", "Expired HTMX requests demand full prefixed login", "Mobile login fits and browser has no JavaScript errors" ], "synthetic_users": true, "disposable_sqlite": true, "local_http_only": true, "production_edge_admitted": false }