One public surface

This page is a React Server Component running on a Lambda Web Function. The orders service behind it has no URL; the web function reaches it with IAM. Sign-in is a passkey ceremony whose server half runs here, so the browser never talks to Cognito.

The same pages are what the mobile shell opens in a WebView, with the passkey bound to this domain.