Production starts with a clear plan.

Access is limited by the configured Google domain and the central Viewer, Scheduler, and Administrator access map.

Production never enables the synthetic identity. Missing authentication configuration fails closed.