Sign-in is real: the session belongs to a verified identity within an explicit tenant. Only private-pilot accounts can enter; there is no public signup.