LensReading which lens this session carries.

Refused by the page register

Identity and tenancy is closed to this session

/identity carries a declared floor of Function Leader.

PAGE-FLOOR

what this page does

Identity

The page names who may sign in and which tenant they belong to.

declared floor

Function Leader

The same floor is held on POST /api/tenancy/probe, so the control and the page it lives on refuse at the same line.

what this session holds

No session

Signing in is what produces a role. Until then there is nothing to compare with the floor.

Why this route carries a floor

Taken word for word from the page register, which is published in the open.

The page names every account that may sign in, the role the directory gives it, the tenant it belongs to, and where the boundary between the live estate and the sandbox sits.

What to do about it

Sign in and the role is read from the account record. If the account behind it still sits below the floor, this same screen appears again with the role named.