Auth & Access

If upload is blocked while signed out — expected. CSP refusals involving Google/Supabase hosts may indicate misconfigured environment allowlists (ADR 0056).