CIPT / Physica / LHPT MVP

Hosted Demo Checkpoint

This public landing page reflects the current hosted MVP posture honestly: the named steady-state checkpoint is demo.cipt.dev in cookie-bound mode, while one separate stronger-bind proof point exists on bind.cipt.dev.
Public posture
Steady-state demo path
  • demo.cipt.dev is the named hosted checkpoint.
  • Public bind posture is origin-challenge-cookie-sha256.
  • Host 1 issues through the separate Host 2 issuer bridge.
  • Reviewer-only pages remain non-public by design.
Bounded stronger bind
Separate proof point
  • bind.cipt.dev has one hosted tls-exporter-sha256 proof point.
  • That proof was captured on the repo trusted-ingress path.
  • It does not replace the named steady-state public checkpoint.
Reviewer access
Still intentionally bounded
Reviewer and debug routes remain SSH-tunneled / localhost-only in the current hosted MVP. This page is public; the reviewer landing is not.