BOUNDFIX ENCLAVE // ZERO-KNOWLEDGE EDGE
RFC 3161 TIMESTAMPED • FIDO2 / WEBAUTHN HARDENED
BoundFix BoundFix Enclave Client Portal

Client & Engineer Enclave

Fast, passwordless sign-in for your security deliverables, temporary credential locker, and direct engineer desk.

STEP 1
Enter Work Email
STEP 2
Touch Sensor / PIN
STEP 3
Instant Access
💡 First time signing in? How this works:
You do not need a password! When you click the button above, your computer or phone will prompt you for your device fingerprint, Windows Hello PIN, or Touch ID. It takes 2 seconds and is 100% immune to password theft or phishing.
Hardware-Bound Zero-Trust Security
Origin verified at vault.boundfix.com. FIDO2 / WebAuthn cryptographic challenge.
Need portal assistance? Contact support@boundfix.com
Example Corp Enterprises LLC
Domain: example.com • Active Hardening Sprint (Day 3 of 5)
LEAD ENGINEER: #104 (Principal Console)
Origin Verified: WebAuthn Passkey Active
Zero-Knowledge Temporary Credential Exchange

Never transmit administrator credentials via unencrypted email or SMS. Values stored below are encrypted client-side using AES-256-GCM. BoundFix engineers decrypt only during verified audit execution.

STEP 1: CREATE ACCOUNT
In your Microsoft 365 Admin Center, create a temporary admin account (e.g. temp-admin@yourcompany.com).
STEP 2: LOCK IN VAULT
Enter the password below & click Encrypt & Lock. Your browser encrypts it with AES-256-GCM before sending.
STEP 3: 72H AUTO-BURN
We decrypt it solely to run your sprint. After 72 hours, the vault automatically burns it, and you delete the account.
Locker Status: Awaiting Temporary Credentials

No temporary credentials have been deposited for this sprint yet. Enter your temporary Microsoft 365 admin account below to begin:

Cloudflare Paperwork & Deliverables Container
0 Files Stored in D1

Permanent Cloudflare storage container for signed Statements of Work (SOW), Evidence Binders, Recovery Runbooks, Remediation Logs, and Client Questionnaires. Every uploaded file is SHA-256 fingerprinted and retained persistently inside Cloudflare D1.

📥 Deposit Paperwork or Deliverable into Container
CLOUDFLARE D1 CHUNKED BINARY VAULT • SHA-256 SEALED
Click here or drag & drop a file to store in the Paperwork Container
Supports PDF, DOCX, XLSX, ZIP, PNG, TXT, CSV, PS1 • Retained permanently in Cloudflare D1
📁 Retained Paperwork & Deliverables in Container
File Name & Notes Client / Folder Category Size SHA-256 Fingerprint Stored UTC Actions
Loading stored paperwork from Cloudflare D1...
Authenticated Direct Engineering Channel
• D1 Persistent Chat History Active

Direct, persistent communication channel between Client POC and Lead Operating Engineer. Messages are permanently retained in your Cloudflare D1 Enclave table and never traverse public email.

No messages exchanged yet. Send a message below to start your private coordination thread.
Inbound Scope Requests & SOW Pipeline Operating Engineer Console
Live telemetry feed of all inbound scope requests submitted through the public BoundFix engineering desk.
Ticket ID Client Name & Domain Work Email Service Package Scope Notes Submitted Action
Loading inbound scope requests from Enclave API...