Choose Your First Step
Start with the task you came here to finish.
CLEAR Workspace
CLEAR Home
Testing & Release Tools
Open these when you are running walkthroughs, QA sessions, or launch checks.
Current Snapshot
A quick summary of verification, cards, permissions, and test readiness.
Enrollment
Loading enrollment summary...
Credential Wallet
Loading credential summary...
Consent Management
Loading consent summary...
Transparency (Read-only)
Loading transparency summary...
External Assurance
Loading external assurance summary...
Alpha Readiness
Loading alpha readiness...
Alpha Readiness Details
- Loading readiness details...
Readiness details not loaded yet.
Recent Alpha Sessions
- Loading recent session history...
No history actions yet.
Launch & Test Controls
Start with the first row for normal testing. Open advanced sections only when needed.
Checking system readiness...
Loading session details...
Start Here
Guided checklist not loaded yet.
Demo setup has not been run yet.
Automation & reset tools
No full autopilot runs yet.
No fresh-session resets yet.
No session brief exports yet.
More alpha pages
Import/export advanced data
No import/export actions yet.
No full-session bundle actions yet.
Security Model
- Production deployment enforces HTTPS redirects, strict transport headers, and `Secure` session cookies.
- CSP enforced to prevent injected script execution.
- CORS is allowlisted: canonical CLEAR origins in production, with localhost loopback origins retained for standalone development.
- Session cookies always use `HttpOnly` and `SameSite=Lax`; the `Secure` attribute is added in production and intentionally omitted on local HTTP loops.
- Standalone local development intentionally supports HTTP localhost flows instead of claiming production-only transport guarantees.