Mission Control & Telemetry

Control-plane structure and this operator's own live authorizations. Platform-wide runtime telemetry (RLS coverage, cross-staff grant visibility) is not yet exposed by any endpoint -- see below rather than a fabricated summary.

Live verification unavailable

Purge SLA (I1)

Unknownp50 unavailable

p99: unavailableEvidence required

PostgreSQL RLS (I6)

By design

FORCE ROW LEVEL SECURITYNot runtime-checked here

PII Isolation (I7)

—Your Active Grants

Own session onlyMax 8h Limit

Control Plane (I9)

12Domains Defined

Dual-Control EngineOpen Browser

12 Control-Plane Domains (§14.2)

Config Browser

AI_MODEL_ROUTING

Capability routing, models & fallbacks

DATA_SOURCE_ENGINE_MODE

STANDARD vs AUTHORITATIVE WAEC mode

STATISTICAL_CALIBRATION

Stanine quotas, cutoffs & Monte Carlo

FEATURE_FLAGS

Targeted flags, rollouts & kill switches

INTEGRATION_PROVIDERS

Arkesel/Hubtel SMS, Paystack MoMo, OCR

PRICING_ENTITLEMENTS

Commercial plans, passes & vouchers

PRIVACY_RETENTION

Act 843 raw scan purge (<5s) & R2 rules

SECURITY_ACCESS_POLICY

WebAuthn, session TTLs & lockouts

TRAFFIC_RESILIENCE

Edge Waiting Room & rate limits

NOTIFICATIONS_TEMPLATES

SMS & WhatsApp notification templates

TENANCY_PROVISIONING

School tenants, DPA agreements & seats

OBSERVABILITY_GUARDRAILS

Anomaly detection & error budgets

Each domain's actual current state (proposed/active/canary values) is only real in the Config Browser above -- this list is not a live per-domain status check.

Operator Workflows

Provision School Tenant

SUPER_ADMIN

Propose Config Change

Dual Approval

Adjust Feature Rollout

Targeting

Emergency PII Elevation

≤ 8 Hours

Purge SLA Verification

Act 843

WORM Audit Log (Invariant I7)

Every platform mutation is cryptographically signed with HMAC-SHA256 and records SHA-256 payload digests.

Loading latest entry...

Explore Audit Records →