🤖 Operator access to the server is now on the public record. Whenever one of
us signs in to the machine that runs Eleven, that session appears on the
public status site — who it was, when, and a plain-language reason why —
at status.elevenmessenger.com/ssh.html. Only the fact of the access is
published, never what was typed or seen, and a session with no reason given
is flagged loudly rather than hidden. It's the same idea as the prompt
ledger: if someone's hands were on the infrastructure your messages pass
through, you should be able to see that they were, and why.