Sign in

Google SSO. Allowlist is @travelai.com and @w3engineers.com (verified Google addresses only). Fail closed — nobody else gets in.