002NOTESSEED · 6 MIN
Building HostPanel, Part 2: Inside the Core Architecture
A correction and an update: the loopback token is a static bearer token, not HMAC-signed — plus how portald's auth split, selective audit logging, and the marketplace catalog fetch actually work in v3.1.
hostpanel · 05 AUG 2026