No marketplace password
Eldorado sign-in stays on Eldorado. The extension connects the current browser session instead of collecting account credentials.
SECURITY
The browser is a bridge, not the business brain.
Durable protection comes from server-side decisions, revocable device identity, and fenced execution—not hidden credentials in an extension.
Device-bound requests
Each paired device has a revocable credential and an ECDSA key used to sign sensitive requests with a timestamp and one-time nonce.
One active executor
A database lease and fencing token reject an old device after failover, preventing two computers from executing the same command.
Server-side decisions
Pricing, permissions, limits and action eligibility remain on the backend. The extension contains only browser-session plumbing.
Tenant isolation
Workspace-owned data uses Row Level Security and server-side scope checks. A workspace ID supplied by the browser is never trusted by itself.
Fail closed
Expired commands, unknown prices, stale sessions and parser drift pause the affected action instead of guessing or replaying work.
Revocable access
Owners can revoke devices and sessions, pause automation and require a minimum extension version.
Redacted diagnostics
Cookies, JWTs, passwords, private keys and payment secrets are prohibited from production logs and support exports.
Responsible operation
EldoradoOps does not include CAPTCHA solving, fingerprint spoofing, stealth claims, or functionality designed to conceal prohibited activity. A marketplace workflow remains disabled when its safe operation cannot be verified.
Independent product
EldoradoOps is independent software and is not owned, operated, or endorsed by Eldorado.