Identity · access · trust

One safe door.

Your community lives somewhere else. MyFenrir stands in front of it—confirming identity, access and intent before anyone reaches the real room.

One surface · progressive depth

Everything the gate decides.

Explore MyFenrir by intent. Start with what the system does. Open the procedure only when you need it—or switch reading altitude entirely.

01

Identity

3 decisions

Member sign-in

Confirm who is asking to enter with a trusted identity provider.
Default Required
Providers 3
Why it exists

A verified identity gives every later access decision a stable person to attach to—without asking members to create another password.

Member path
  1. Open the community link.
  2. Choose Apple, Google or Microsoft.
  3. Return to the gate with identity confirmed.

Account continuity

Keep the same member recognizable across community touchpoints.
Scope Global
State Automatic
Guarantee

Community access remains attached to a durable Frisky account identity rather than a temporary browser session.

Implementation

Identity is resolved at sign-in and connected to the community gate data plane.

02

Access

3 decisions

Entitlement check

Resolve whether this member currently has the right tier or payment status.
Default Enforced
Timing Before entry
What happens

The gate evaluates entitlement before generating an invite. The protected group never becomes the place where payment is sorted out.

Owner control

Access tiers and community-specific rules determine the outcome.

Safe invitation

Issue a clean, controlled handoff to the protected group.
Type Single use
Exposure Private
Why it matters

The real group link stays hidden. Only a member who passes the gate receives the final handoff.

Member experience

One clear result: you are in, you need action, or your access needs review.

03

Trust

2 decisions

Community rules

Make the agreement explicit before a member crosses the threshold.
Default Required
Evidence Recorded
Reader promise

Rules appear at the moment they matter, attached to the community being entered.

Owner promise

Acceptance becomes part of the access record instead of an unread pinned post.

Human review

Route ambiguous profiles to an owner instead of making an irreversible automatic call.
Fallback Review
Decision Owner
Principle

Automation handles the obvious. Humans keep authority over the meaningful edge cases.

Tools

Profile review, moderation actions, access tiers and decision history.

01
The member journey · in four moments

Good access feels like nothing.

The member should not learn your infrastructure. They should feel a clear threshold, a fair decision, and a quiet welcome.

MyFenrir keeps the complexity on the side of the system. A person arrives with a link. The gate gathers only what the decision requires. The destination stays private until the moment it is safe to reveal it.

01 / ARRIVE

A link, not a maze.

One branded entry point. No app hunt, no dead-end documentation, no invitation forwarded into the open.

02 / IDENTIFY

Bring your real self.

Apple, Google or Microsoft confirms identity. No new password, no second account to forget.

03 / RESOLVE

Checked in context.

Entitlement, rules, Telegram status and invite safety resolve behind the surface.

04 / WELCOME

Cross the threshold.

A safe, single-use handoff to the protected group. The gate recedes.

02
The decision surface · visible outcomes

Every answer has a shape.

A gate is not a spinner. It is a set of explicit decisions with an outcome the reader can understand.

That clarity is part of trust. “You’re in” is different from “we need one more thing” and different again from “an owner will review this.” MyFenrir gives each state its own language.

access.granted

You’re in.

Identity and entitlement are confirmed. The protected destination can be handed over safely.

access.action_required

One more thing.

A rule, payment or provider step needs the member’s attention before access can continue.

access.needs_review

An owner decides.

The system keeps the edge case visible and routes it to a human with context intact.

03
The owner surface · control without ceremony

Keep the room yours.

The owner gets one calm place to see what the gate is deciding—and where a human voice is still needed.

Review profiles, set access tiers, clean up chat, ban when necessary. The point is not to replace judgment. It is to keep judgment from being buried under repetitive work.

98.4%clear decisions · last 30 days

Review queue

New profile · @maraREADY
identity matched
Tier change · StudioWAITING
owner decision
Rule acceptanceRECORDED
3 minutes ago
Invite safetyHEALTHY
single-use enabled
04human reviews open
07active access tiers
04
The contract · principles that stay true

The door has rules too.

The system is only trustworthy if its boundaries are legible to the people who depend on it.

These are not marketing promises. They are design constraints carried through the Bridge, Community Gate and the private destination beyond them.

Private by default

The protected group never becomes a public index. Access is earned at the threshold and invitations stay controlled.

Identity is durable

A real account, not a disposable browser session, anchors the decisions made across the community journey.

Humans keep the edge

Automation handles repeatable checks. Ambiguity stays visible, reviewable and owned by the person responsible for the room.

Bot OS · community runtime

The bot is the
living layer.

MyFenrir owns the admin shell and entitlement truth. Fenrir Gatekeeper owns the Telegram runtime: waiting room, mute-on-join, welcome card, Mini App verification and one-time invite. Bot OS curates the blueprint and ships the secrets.

COMMUNITY BLUEPRINT · V1botType: communitygates: turnstile · oauth · rules · vibeinvite_ttl: 300swebhook: /api/telegram/webhook
01 · WAITING ROOM

Mute first.
Explain clearly.

A new member arrives in the waiting room muted. The bot presents the community promise and one obvious next action: Verify Now.

join eventwelcome cardmute on join
02 · FOUR GATES

One flow.
Four proofs.

Turnstile limits automation. OAuth establishes identity. Rules make the agreement explicit. Vibe review protects the room’s character.

turnstileoauthrulesvibe
03 · HANDOFF

Unlock once.
Invite safely.

After the checks pass, the Worker consumes the decision and issues a single-use Telegram invite with a five-minute lifetime.

stars unlockinvite ttl 300srevoke
Ownership map

MyFenrir → brand, membership review, Stars entitlement UI, readiness.

Fenrir Gatekeeper Worker → Telegram runtime, waiting room, Mini App, invite consumption.

Frisky Bot OS → community blueprint curator, export and Infisical deployment secrets.

D1 + Stars webhook → entitlement truth. The bot records bot identity; it never becomes the billing database.

Operator loop
  1. Curate the community session in Bot OS.
  2. Export the blueprint JSON.
  3. Deploy Gatekeeper with secrets from Infisical.
  4. Run readiness: bot configured + Stars configured.
  5. Test join → Verify Now → invite → unlock.
MyFenrir knowledge system · 30+ wikis

The whole
operating map.

This is not one explainer. It is the living map of the product: identity, domains, Telegram locks, workspaces, billing, community review, integrations and the launch gates that keep production honest.

Architecture · on demand

The group is never the front door.

The Bridge is a checkpoint, not a destination. It resolves identity and access, then disappears from the member's path.

One branded community linkPublic surface
Fenrir BridgeIdentity · access · trust
Community GateDecision record · Neon
Protected groupPrivate destination