How sign-in works here. Google OAuth restricted to the xmartlabs.com Workspace. The server cross-checks your email against the admin allowlist. Anything else gets a 403. Sessions last 30 days on this device.