Control stays human.

Create or sign into an operator account. Sessions are hash-only, time-limited, HttpOnly-cookie protected, and every cookie-authenticated change requires CSRF validation.

Azure staging environment. No email is sent, no OAuth is used, and no real money or external payment provider is connected.