This page is scaffolding for issue #3 and proves one thing: a second subdomain reads the hub’s session. The deployment around it is no longer throwaway — it hosts the HAVI label app (S-035). See apps/os/README.md.

Not signed in

No session, an expired one, or one this app could not verify. Either way there is nothing to ask you here: this app has no sign-in page and never will (S-008).