Authentication

API keys for projects, sessions for operators.

SignalForge separates machine access from human access so API traffic and operator behavior stay scoped correctly.

User sessions

Workspace operators sign in with email and password. Session handoff moves them from the public site to the dashboard without leaving a JWT in the URL.

Project keys

Project API keys are scoped to one project and are used for content intake, background workflow integration, and webhook-triggered publishing paths.