One console. Role decides the rest.

Navigation and APIs come from the role record in Postgres. Operations, risk, treasury, and demo each see a different desk. LPs use port 3002.

• Permissions checked on every request
• LPs manage funds on their own portal
• Demo lab only if the role allows it