Dashboard + contributor gateway
Public-surface thesis: a browser client and fail-closed GitHub admission path without letting the browser attest scores or granting repository write.
Artifact 17.07.26 · public surface · fixture non-official
Expanded bullets
- Open-source dashboard: challenge catalog, fixture scoreboard, evaluator lifecycle, ZIP intake client, WebGL molecular/path viz.
- AWS SAM stack serves static assets from private S3 through CloudFront; fixture mode deliberately non-official.
- Browser cannot attest or promote a score onto an official board.
- Contributor gateway design: one-purpose Lambdas, PKCE, temporary-token revocation, Host-only sessions, CSRF, private S3 uploads, UTC-day quota, FIFO admission.
- Lambda never executes untrusted solver code; login does not grant repository write; production credentials undeployed.