chore: Preview workers verify logins with the same signing secret as production, so no agent can be handed a safe copy - #9635

Open

usirin wants to merge 2 commits into

mainfrom

build/9533-preview-auth-key-49f66d24

Commits on Sep 21, 2026

feat: previews sign sessions with a committed public key, production keeps the founder-held secret (#9533)
usirin
committed
4ffdaf9
fix: renumber the preview-key decision to 0406 and carry review-ui's contract off the retired secret route (#9533)
usirin
committed
c323974