Operational note for the cameleer-saas / Logto admin team. Covers what changed in cameleer-server (RP-Initiated Logout via top-level redirect + POST /auth/logout server-side revocation + signed-out splash + prompt=login defence), what they need to register in Logto per tenant, how to verify, and a failure-mode runbook table. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>