EverHash 14-Menu Admin Command Center

Equipped with Bugs 25–30 Six Hardware-Grade Insider-Threat Locks · High-risk actions enforce WebAuthn/TOTP Step-Up and append to an immutable SHA-256 hash chain

🔒 Bug 25 · Write-Only Sealed Upstream Key Vault

Upstream API keys are sealed via AES-256-GCM; admin endpoints only ever return masked hints (sk-p...9988) to prevent key exfiltration.

🔒 Bug 26 · $50/24h Promo Mint Circuit Breaker & 6 Conservation Laws

Global admin promo code minting is hard-capped at $50.00/24h with continuous 6-law ledger reconciliation.

🔒 Bug 27 · ≥1.06x Cost-Floor Guard & Dual-Admin Approval

Model pricing below 1.06x official upstream cost is rejected and requires 2-admin approval (self-approval blocked).

🔒 Bug 28 · Physical Zero-Plaintext Blind Telemetry Logs

The request_telemetry_logs table physically omits Prompt, Response, and Client IP columns at the PostgreSQL schema level.

🔒 Bug 29 · 3-Role Separation-of-Duties RBAC

Strictly isolates plaza_operator, risk_finance_officer, and super_admin privileges.

🔒 Bug 30 · Trigger-Enforced Immutable SHA-256 Audit Chain

PostgreSQL triggers block all UPDATE/DELETE/TRUNCATE operations and chain every record with previous SHA-256 digests.