KOVEOS

Private founder access

Operations stay private by default.

Local demo access is isolated from hosted identity. Hosted access requires the configured KOVE owner plus a verified authenticator; anything missing fails closed.