Domain lock
Required
Embed bootstrap must fail closed when Origin/Referer does not match a verified domain.
Admin domains
Allowed domains
Domain management controls which customer origins may bootstrap widgets. This page stays read-only until backend domain verification APIs are connected.
contract-first placeholderNo admin token in UI
Verification
Backend-owned
DNS/file verification and domain ownership checks must remain server-side.
Failure UI
Controlled
Unauthorized domains should show a friendly iframe error, not a blank chart or retry loop.