BitterMill App
Secured control plane surface.
This host exists for operator access, tenant sessions, scheduler truth, worker state, requests, and credits. It should not carry the public marketing story in the steady state.
Boundary
App and marketing split
`app.bittermill.com` is the intended secured app host. `bittermill.com` and `www` should carry the static public site.
Security
No anonymous fleet truth
Worker state, lane policy, requests, and operator access events stay on the secured side only.
Current mode
Sealed operator launch
Public signup remains disabled while the control plane and worker trust model continue to harden.