Clerk proof
Google or email code proves control of one account method. It proves no authorship, collection control, identity or rights.
PHASE 5 · BOUNDED CREATOR PILOT
Trust the proof.
Then discover the work.
RebelMarket separates secure access, exact creator claims, encrypted drafts, safe media, human review and public release. Every layer proves only its own fact.
- Google + email code
- MFA required
- Human-controlled release
- Zero commerce
Only the admitted Battle creator may establish the separate Marketplace session. Public release remains separately gated and every commercial capability is absent.
Required MFA
An authenticator application must complete the provider ceremony before a session may become active.
Rebel session
A fresh 256-bit token becomes a host-only HttpOnly cookie. Only its commitment enters isolated storage.
Zero authority
The session cannot publish, list, price, pay, connect a wallet, mutate inventory or act for a RAAP entity.
EXACT AUTHORITY RESULT
Account-method control. Nothing more.
- No creator verification is inferred from sign-in
- No publishing authority comes from access
- No commerce exists in this phase
- RAAP session sharing: denied
- Controller Epoch authority: denied
- AI final authority: denied