Auth chain — statics
Oracle: Gaps 4-6 canvas 6A–6H (LOCKED treatment; F1–F3 set aside). Always dark (G6/G9).
Sign in (6A)
Full-glow canvas, client lockup, deep-blue wash settling to surface — inputs stay on background for contrast. Auth renders dark even in light theme (toggle to check).
Sign in — wrong credentials (6B)
Plain voice: what happened + what to do. The field carries the danger border; the banner explains.
Two-factor challenge (6C)
Segmented 6-digit input, ring on the next box; remember-device 30 days; recovery-code path present.
Enter the 6-digit code from your authenticator app.
Activation — set password (6D)
Live rules card: length, breach check, strength — statics of the three states.
This activates your iNTREO Hub account.
Activation — enroll authenticator (6E)
react-qr-code renders a placeholder otpauth:// URI (not a credential). Manual key beside it; confirm with a code before finishing.
Scan with any TOTP app — Google Authenticator, 1Password, Authy.
Recovery codes (6F) — one-time display
Copy + download, explicit saved-confirmation before finishing.
Each code signs you in once if you lose your authenticator. They won't be shown again.
Forgot / reset (6G)
Reset link by email; new password re-runs the rules card.
Enter your email and we'll send a reset link.
Pick something you haven't used here before.
Phone sign-in (6H)
Same locked treatment on the phone: full-glow dark canvas, lockup, wash card, 44px primary. Auth stays dark on phone too — the bezel is wrapped dark for this board only.