Access
Human identity, organizations and verified Factory-principal binding. Principal keys are never retained.
MCP-first account control
A small control surface, not another dashboard.
Daily Factory work belongs in MCP clients. This application is limited to identity, organization membership and verified Factory-principal control.
Billing
Checkout and membership status relay to the Factory MCP. Entitlement, payment and fulfillment truth stay there; the control key is never stored.
Recovery
Credential mutation, export and deletion remain disabled until their own receipted implementation.
MCP-first
Use SaSame through your AI client.
Use Factory MCP for status, findings, actions and exports. Account Control handles only human control and recovery boundaries.