Protected control plane

Checking operator session

Access is restricted to approved Google accounts. Authentication is verified by Firebase and the Radio API admin allowlist.