Signal Engine — internal

Paste an internal API token. It is checked against the box, then held in an httpOnly cookie for 12 hours. Issue one with tools/issue_token.py --issue "name" --scope internal.

Read-only view of the signal2 API. Nothing here can approve, edit, skip or send — those live behind the signed Telegram links until the approve UI ships. NO SENDS is enforced on the box by two switches this dashboard cannot reach.