JJ Agentic OS
Operator access only. Sessions use httpOnly cookies and Hermes tokens stay server-side.