Day one without joining a network

Day one used to be network day: install the VPN profile, accept the mesh invite, request the bastion certificate, wait for approvals to propagate. The new developer joins three networks before writing a line of code.

On Hoody, day one is being added to a permissions group. Their entry lands in the project's permission document: an IP range or a password: and every environment is already a URL: terminal, editor, logs, staging, checked at the proxy as they open. The laptop installs nothing and enrolls in nothing, because the browser is the client.

Offboarding is the same operation, reversed: remove the entry, and every door closes at once.