Create the first owner

The first owner completes the Server trust boundary. Until this is done, a healthy deployment is still an unclaimed shell.

Keep three credentials distinct

• Account password: signs the owner into Nautilo.
• Approval PIN: confirms sensitive local actions.
• Recovery codes: recover the account; each plaintext code is shown once.

Store all three in a password manager. Do not put them in commands, chat, screenshots, tickets, or ordinary notes.

Claim the Server

1. Require the expected HTTPS Server origin and path /claim.
2. Confirm the private claim fragment disappears from the address bar.
3. On Set up your Nautilo server, choose the permanent owner handle.
4. Complete account creation with the permanent owner password.
5. On Create the first owner, confirm the display name and enter a private 6–8 digit PIN twice.
6. Select Complete setup once.
7. Save every recovery code immediately.
8. Select Open server guide.

Success means /help/server shows Finish setting up your server with paths to configure the Server, configure providers, invite people, and get Desktop.

Prove ownership survives the ceremony

1. Configure or confirm one model-capable provider.
2. Complete one useful model-backed action.
3. Sign out.
4. Return to /help/server without a query or fragment.
5. Sign in as the same owner and confirm the Server Guide returns.

If the browser closes or the claim expires, resume the same deployment. Do not deploy a replacement or submit the owner profile twice merely to test it.