operator
Operators
Grant Linecard verify-mode access and manage the Bubbins-runner dispatcher signing keys the platform uses to verify runner-issued job tokens.
Linecard operators
The linecard_operator role unlocks Linecard verify mode. Grant it by email — the user must already have a Valni account — and revoke it here instead of hand-seeding D1.
Grant operator
Lookup resolves the email to a Firebase UID first. No Valni account for that email means no grant — have them sign in once, then try again.
Bubbins-runner
Dispatcher signing keys the platform trusts to verify Bubbins-runner job tokens. Paste the runner's KMS public key (PEM) — the dispatcher_public_key_pem terraform output. It's converted to a JWK in your browser and registered by Key ID; only the public half ever leaves this page.
Register signing key
ES256 expects a P-256 (secp256r1) public key. The PEM is converted to a JWK locally with WebCrypto; the private key never touches the browser.