┌──────────────────────────────────────────┐
│ NUSEUM · INSTITUTIONAL SETTLEMENT │
└──────────────────────────────────────────┘ [ AUTH ▸ CONNECT YOUR OPERATING ACCOUNT ]
[ TERMINAL · /auth/init · 5-minute self-serve ]
See your last 30 days of FX leak. 5-minute self-serve. Free dashboard. Pay only when you move money. Drop a work email, pick an auth lane, connect a read-only operating account — we score the last 30 days of cross-border wires against the OpenFX 30bps benchmark and tell you, in dollars, how much your current stack is costing you. No password fields. No phone-number captures.
╔═════════════════════════════════════╗
║ MOTD · nuseum auth gateway ║
╠═════════════════════════════════════╣
║ ║
║ > NO password fields exist. ║
║ ║
║ > NO phone numbers are captured. ║
║ ║
║ > Operators 2/3 sign new tenants; ║
║ your initiator never self- ║
║ approves their own access. ║
║ ║
║ > Sessions: session JWT, 1h TTL, ║
║ refreshed in middleware on every ║
║ request. ║
║ ║
║ > CSP nonce per response. HSTS ║
║ preload. COOP same-origin. ║
║ ║
║ > Magic-link is email-delivered ║
║ from hello@nuseum.finance ║
║ ║
║ > Rate limit: 10 attempts / 50s ║
║ per IP. 429 returns Retry-After. ║
║ ║
║ > Lost the link? Re-request — old ║
║ token is invalidated on dispatch.║
║ ║
╚════════════════ press [ESC] to back╝ ▸ wired live once ~/loom-secrets/nuseum.env is populated. preview surface until then.