Profile

The Profile page, in the sidebar’s System group, is a mirror of your operator account: who you are, what authority you hold, and what you have done recently. Everything on it is read-only. The only action you can take here is signing out. Use it to check how you are signed in, whether a CAB signing key is linked to you, and whether any changes are waiting on your approval.

Identity

The card at the top shows your display name next to a row of pills:

active: your account is in good standing.
owner: shown only if you are the tenant owner.
CAB member: shown only if a CAB signing key is linked to your account. See CAB overview.
Your tenant name.

Beside the pills, four fields describe the account:

Field	Meaning
identity	The principal you sign in with, for example `you@westgate`.
member since	When the account was created.
last active	When your current session was last seen.
auth method	How you signed in this session, plus a count of registered passkeys when you have any, for example `password · 1 passkey(s)`.

Signing key

If your account is linked to a CAB signing key, this card shows the key itself: its public key, an active status pill, the algorithm (passkey for a WebAuthn credential), its fingerprint, and the date it was enrolled.

The Rotate key… button takes you to the CAB page rather than rotating anything on the spot. As the card’s own footnote puts it, “key rotation is a governance change and requires CAB quorum”. You cannot swap your key unilaterally. A second footnote notes that the rotation window is not tracked by the control plane.

If no key is linked, the card says so plainly: “No CAB signing key is linked to this operator.” If your linked key has been retired from the roster, the card reads “Linked CAB key not found in the roster.” instead.

Recent activity

This table lists your most recent entries on the operator audit chain: every recorded action taken under your identity, newest first.

Column	Meaning
When	When the action was recorded.
Action	The recorded action name, for example a sign-in or an approval.
Target	What the action applied to. Shown as a dash when the action has no target.
Receipt	The entry’s hash on the audit chain.

A footer shows how many entries you are seeing out of the full chain (“showing 20 of 412 chain entries”), with an open full audit log link for the rest. See Audit log. If you have not done anything yet, the table says “No recorded actions yet.”

CAB authority

This card summarizes your standing as a CAB member. Non-members see a single line instead: “This operator is not enrolled as a CAB member.”

For members, three figures sit at the top:

role: owner or member.
awaiting you: how many pending changes have not yet received your receipt.
approvals · 30d: how many approvals you have cast in the last 30 days.

Below them: your membership status pill, when you joined the CAB, and the tenant’s quorum rule (for example 2 of 3).

When changes are waiting on you, a warning banner spells it out (“2 changes need your approval”) with a Review button that takes you to the CAB page to act on them.

This session

This card describes the session you are signed into right now:

Field	Meaning
signed in	When this session started.
via	The sign-in method, same as auth method above.
last seen	The last time this session was active.
expires	When the session ends. Sessions last 8 hours from sign-in. After that you sign in again.

Sign out appears both here and in the page header. Selecting it opens a confirmation dialog before ending the session, and the sign-out itself is recorded on the audit chain like any other action. See Signing in.

What you cannot do here

Profile displays your account. It does not edit it. There is no control here to change your display name or password, or to add or remove passkeys. Display names are managed by the tenant owner on the operators tab of Settings. See Operators for how accounts are managed and Passkeys for the current state of passkey support.