The owning-application UI tier (ADR-0001). The RFC 7009 consent screen lives at /consent.html and is reached via platform-api's /oauth/authorize redirect, not opened directly.
platform-api
/oauth/authorize