Tenant portal production protected mode requires Firebase Auth and tenant_admin custom claims. No private production tenant data is visible before sign-in and role verification.