RESTRICTED · OPS

Console

Static console on a CDN — independent of the application's servers. Config published here reaches live clients directly, even during a total outage.

Access

No token
OAuth client (optional, one-time)

Locked

Authenticate above with an authorized Google account to reveal the controls. This console holds no secrets and can do nothing without a Google credential that IAM permits on this project — it is inert for anyone else.

Status

API = real health check. Others are edge probes from your network — "edge up" proves the host answered, not that the origin is alive.

Kill switch

maintenance_mode shows every member a full-screen "we'll be right back" notice within ~1 min of app foreground — no restart, no OTA. Currently:

Remote Config

Authenticate to load the live template.

History & rollback

Authenticate to load version history.

Broadcast (FCM)

Sends a push via FCM topic — reaches only devices subscribed to the topic. Rizz currently pushes per-token from the API, so treat this as experimental until the app subscribes to a topic.

Runbook

Recovery steps, hosts, and consoles are kept in the private ops repo — deliberately out of this page's public source. If this console is unreachable, drive Remote Config from the provider console directly.