Plans

Near-term door hardening and medium-term identity brain — without expanding other products.

Near term (before wide invite)

• Close soft hinge: first valid code on the gate ladder runs confirm semantics (enable + backup codes once); do not leave a durable attacker-controlled seed as the only secret.
• /totp-qr may mint a pending secret but must not treat the account as hooked until confirm.
• Admin / Rue recovery runbook written and practiced (anti-social-engineering).
• Rate limits + replay rejection + password backoff kept as law (NIST-aligned direction).

Medium term

• One login brain across more RUEZALS surfaces (JIT provisioning via keyhole).
• Portal (login.ruezals.com) and chat gate unify over time — same brand, one brain.
• Auth event log; “last login / new device” line inside the house.
• Passkeys optional later; SMS never.

To fill… portal unify milestones and which relying parties register first.

Echo (boundary only)

Echo polish (finder law match, Allow/Deny reliability) stays optional companion work — not a substitute for TOTP. Stop expanding phone depth here.

• After the door opens → RUEZALS chat (stop).
• Brand / marketing → RUEZALS.com or RUEZALS stub only.