Grimstead playtest box — auth API only.