A university operating system: fifteen production frontends and a generated typed API client over isolated microservices. It is not a stack of vendors.

Institution Owner is the only self-service path. Platform users have no signup — the Platform Owner provisions them. Students and staff are provisioned by the tenant.

Authenticator app, mobile push, registered email code, and passkey. SMS, text, voice, and phone factors are prohibited.

Only through the generated client. Set NEXT_PUBLIC_PRESIGHTFUL_API_BASE. If it is missing, the UI fails closed.

No. Production paths do not ship mock login gateways or fixture tenants.