First-Boot Setup Wizard & Domain Verification
Initializing your workspace, generating Ed25519 policy signing keys, and verifying official domain ownership via DNS TXT.
First-Boot Initialization & DNS TXT Proof
On first boot, POST /api/v1/admin/setup initializes the workspace identity, creates the initial organizational departments, generates the workspace's Ed25519 policy signing keypair, applies the selected policy preset (standard, regulated, or strict), and provisions the initial SUPER_ADMIN account.
From the Cloud Services & Identity tab in the Admin Console, administrators can register the organization's official domain (e.g., org.gov.sa) and verify ownership by publishing the generated _madar-verify.<domain> DNS TXT record (madar-domain-verify=mdr_...). Once verified, /.well-known/madar-workspace.json exposes domain_verified: true.