Job console

payer key signs every action — the server holds no authority