Device token status
Each device uses its owner's token. The light shows whether that token is ready to use.
No devices enrolled yet
Devices appear here as soon as they enrol with a one-time code.
Green: token valid
Amber: token expires within 30 days, or the device was rate-limited in the last hour
Red: no token, expired, rejected on last use, user disabled or device revoked