Scaffold gate over fictional fixture data. The production identity model uses individual operator accounts with WebAuthn step-up; the shared credential is break-glass only — its use alerts the team and opens an incident record.