Tap a person to see everything they can reach, grouped by app. Check a tab to grant
everything in it — now and in the future; check a single tile to grant just that tile
(a tile-only person gets a one-tile Pulse). AllureOS itself is gated by Super-admin.
Loading auth gate…
Hub Sites · Phase 2 Rollout
Each Hub site embeds auth-gate.js, retires its legacy password gate, and redeploys — that's
the whole change. No per-site Clerk env vars: the gate is client-side and the server check
runs centrally on allure-os. One site per session; the four named sites each have a
self-contained CLERK-AUTH-ROLLOUT.md in their project folder.