Goal

The admin-facing sovrn surface (ADR-0006 D13): configure email for a domain, manage users. Distinct audience from webmail.

Decisions (open)

• Bundled into the orchestrator vs. separate binary — deferred (docs/09 D-F).
• Go, server-side rendered, templ + HTMX.

Tasks

• Mutation/query XRPC endpoints: create domain, add/remove account, list domains/accounts, view DNS desired-state for manual setup.
• Tenant admin sees all their domains; domain admin sees their domain’s accounts (member-list read via space, or app-view query — match the reconciler).
• Wire signup intent into the claim state machine (see reconciler issue).

Depends on: lexicons (f6192a1), reconciler. Basis: docs/adr/0006-data-placement-and-space-topology.md, docs/00 §5.