Key controls
- API credentials are stored as hashes rather than raw keys.
- Queue API credentials are scoped to a workspace, Queue Unit, permissions, and configured location or category boundaries.
- Publishing pins immutable content versions for Player delivery.
- Device unlock passcodes are stored as salted hashes and are never returned in full after creation.
- Public errors use stable codes while technical diagnostics remain in restricted logs.
Never include API keys, pairing tokens, device tokens, or unlock passcodes in screenshots, support messages, or documentation examples.

