BOUNDFIX ENCLAVE // ZERO-KNOWLEDGE EDGE
RFC 3161 TIMESTAMPED • FIDO2 / WEBAUTHN HARDENED
BoundFix BoundFix Enclave Client Portal

Client & Engineer Enclave

Fast, passwordless sign-in for your security deliverables, temporary credential locker, and direct engineer desk.

STEP 1
Enter Work Email
STEP 2
Touch Sensor / PIN
STEP 3
Instant Access
💡 First time signing in? How this works:
You do not need a password! When you click the button above, your computer or phone will prompt you for your device fingerprint, Windows Hello PIN, or Touch ID. It takes 2 seconds and is 100% immune to password theft or phishing.
Hardware-Bound Zero-Trust Security
Origin verified at vault.boundfix.com. FIDO2 / WebAuthn cryptographic challenge.
Need portal assistance? Contact support@boundfix.com
Example Corp Enterprises LLC
Domain: example.com • Active Hardening Sprint (Day 3 of 5)
LEAD ENGINEER: #104 (Principal Console)
Origin Verified: WebAuthn Passkey Active
Zero-Knowledge Temporary Credential Exchange

Never transmit administrator credentials via unencrypted email or SMS. Values stored below are encrypted client-side using AES-256-GCM. BoundFix engineers decrypt only during verified audit execution.

STEP 1: CREATE ACCOUNT
In your Microsoft 365 Admin Center, create a temporary admin account (e.g. temp-admin@yourcompany.com).
STEP 2: LOCK IN VAULT
Enter the password below & click Encrypt & Lock. Your browser encrypts it with AES-256-GCM before sending.
STEP 3: 72H AUTO-BURN
We decrypt it solely to run your sprint. After 72 hours, the vault automatically burns it, and you delete the account.
Locker Status: Awaiting Temporary Credentials

No temporary credentials have been deposited for this sprint yet. Enter your temporary Microsoft 365 admin account below to begin:

Cryptographically Verified Deliverables

Permanent repository of your tamper-evident compliance artifacts. Anchored to your exact tenant telemetry and RFC 3161 timestamped.

📁
How your vault works: Every completed deliverable from your hardening sprint is archived below permanently. Each file has an unalterable SHA-256 digital fingerprint so you can prove to technical auditors or leadership that your compliance records were never modified. Click Download on any file to view.
Deliverable Name Type Size Cryptographic SHA-256 Digest Action
2026-10-18_Example_Technical_Evidence_Binder.pdf Evidence Binder 3.8 MB 8f4c2b9a...1b3c5d
2026-10-18_M365_Tenant_Recovery_Runbook.pdf Disaster Runbook 2.1 MB 3c5f0a8b...4c2b9a
2026-10-18_Remediation_Configuration_Manifest.pdf Change Log 820 KB a1b3c5d8...e7f9a1

Secure Client Document Upload (Zero Email Attachments)

Upload security assessment questionnaires, network topology diagrams, or third-party audit requirements safely into your encrypted enclave.

Click or drag files here to upload to Enclave R2 Storage
Encrypted at rest • Zero public endpoints • Automatic SHA-256 calculation
Authenticated Direct Engineering Channel

Direct communication channel between Client POC and Lead Operating Engineer. Bypasses corporate email to eliminate wire fraud and interception risk.

💬
Private Engineering Desk: This chat connects you directly with your assigned Lead Operating Engineer. Messages sent here never traverse public email, keeping your tenant configuration and sprint coordination 100% confidential.
No messages exchanged yet. Send a message below to start your private coordination thread.
Inbound Scope Requests & SOW Pipeline Operating Engineer Console
Live telemetry feed of all inbound scope requests submitted through the public BoundFix engineering desk.
Ticket ID Client Name & Domain Work Email Service Package Scope Notes Submitted Action
Loading inbound scope requests from Enclave API...