Authorised access only. Sessions are validated server-side, transmitted over HTTPS and held in a Secure; HttpOnly; SameSite=Lax cookie. Failed attempts are rate-limited per account and per network. This console reads production for status only — it cannot book, pay, ticket or dispatch.