Create the first owner

The first owner completes the Server trust boundary. Until this is done, a healthy deployment is still an unclaimed shell.

Keep three credentials distinct

• Account password: signs the owner into Nautilo.
• Approval PIN: confirms sensitive local actions.
• Recovery codes: recover the account; each plaintext code is shown once.

Store all three in a password manager. Do not put them in commands, chat, screenshots, tickets, or ordinary notes.

Claim the Server

1. Open the exact /claim URL issued for this Server. Plain HTTP is supported only when the URL host is exactly localhost, 127.0.0.1, or [::1] (IPv6 loopback)—not another local-network address. Every non-loopback origin must use HTTPS.
2. Before entering credentials, confirm the scheme, hostname, and port still identify the Server you intended to claim. For a remote Server, the hostname must be the configured Server domain. Do not continue through a certificate warning, a redirect to another origin, or a lookalike hostname.
3. Confirm the private claim fragment disappears from the address bar.
4. On Set up your Nautilo server, choose the permanent owner handle.
5. Complete account creation with the permanent owner password.
6. On Create the first owner, confirm the display name and enter a private 6–8 digit PIN twice.
7. Select Complete setup once.
8. Save every recovery code immediately.
9. Select Open server guide.

Success means /help/server shows Finish setting up your server with paths to configure the Server, add API keys, invite people, and get Desktop.

Prove ownership survives the ceremony

1. Configure or confirm one model-capable provider.
2. Complete one useful model-backed action.
3. Sign out.
4. Return to /help/server without a query or fragment.
5. Sign in as the same owner and confirm the Server Guide returns.

If the browser closes or the claim expires, resume the same deployment. Do not deploy a replacement or submit the owner profile twice merely to test it.