A True Story
On July 7, 2026, a viewer account was tested live against the running system: every read worked, every attempted edit was refused. The role boundary is enforced, not decorative.
Curated Sync Guide · Your Control Panel
Curated Sync Guide · Your Control Panel
Who can sign in, what each role may do, and every guard standing between your data and a bad day.
This guide explains the Security screen in the Curated Sync control panel. Written for admins. Four minutes to read.
CURRENT AS OF JULY 16, 2026The panel lists all 25 protections with their live mode. Nothing is a black box.
The Security screen renders every protection the system runs: image and download guards, request limits, sign-in protection, catalog safety checks, audit trails, and more. Twenty-five in all, each showing its current mode in plain words.
When someone asks "is our data safe in this thing?" the answer is a screen, not a promise.
All 25 protections, live, named, and inspectable at any moment.
Runs syncs, changes settings, manages keys, users, and rules. Every action lands in the Activity log with their name.
Sees everything, changes nothing. Every edit attempt is refused by the server itself, not just hidden by the screen.
On July 7, 2026, a viewer account was tested live against the running system: every read worked, every attempted edit was refused. The role boundary is enforced, not decorative.
Everyone signs in as themselves. Viewers can look, admins can act, and the log knows the difference.
Repeated failed sign-ins are locked out. Brute-force guessing does not work here.
Sessions expire and renew safely. A stale browser tab cannot act forever.
Suspicious addresses can be blocked. It runs in monitoring mode today; strict enforcement waits for hosting-level validation, deliberately.
The boring protections run all day so nobody has to watch the door.
Admins, on this screen. New users get a one-time password shown once. The last admin can never be removed, so you cannot lock yourselves out.
Off, monitoring, or enforcing. Protections start in monitoring to prove themselves, then enforce. Behavior never flips by surprise.
Always. Every admin action is audited by name. See the Activity screen guide.
Security here is a living panel: people, roles, and 25 named guards you can point at.