Identity without oversharing.

SVCS First sends reviewed clients only the identity provenance needed for secure service access.

Passwords, raw cookies, authorization codes, PKCE verifiers, reset links, and actor tokens are excluded from browser-readable storage and ordinary logs. Selected Party and workspace values remain requests to validate—not claims of authority.