operator only

Operator console

This is where X Money sends get operated once that rail ships. The live claim flow today pays a bound owner's own wallet directly via release(). See /status. This console already talks to services' queue endpoints; nothing on /claim routes through it yet.

There is no real auth system in Phase 1. This is a shared-secret header (X-Operator), matched againstOPS_ALLOWED_OPERATORS on services. It is a placeholder, not a security boundary. See services/src/ops/routes.ts.