Sign in
This system authenticates with a passkey. There is no password to phish and the browser never holds a shared secret.
Sign in with a token instead
For a headless browser, a recovery session, or a machine with no
authenticator. The same credential jv uses.
Enrol the first operator passkey
One time only. This gate was opened during provisioning and closes permanently the moment a passkey is registered. The secret is held on the server only as a SHA-256 digest.
Traces & Cost
What did it do, why did it fail, which tool, how much did it cost.
Failing traces first. Select one for its waterfall.
No trace selected
Model calls
Tool calls
Audit
Memory health
System
Is it healthy, and can it come back from destruction?
Processes
Database
Backup & recovery
Audit ledger
Knowledge graph
Readiness
implemented ≠ wired ≠ enabled ≠ production-active. Measured, not declared.
LLM
Agents
Worker & schedules
Authority
Learning
Knowledge & tools
Execution
Job queue, by kind
| Kind | Pending | Running | Dead |
|---|
Model gateway
Spend & calls, last 24h
Retrieval eval
| Suite | Score | Corpus | When |
|---|
Providers
| Model | Task classes | Retention | State | 24h calls | Errors | Spend |
|---|
Retrieval Inspector
Select an assembly to see every item that was considered — selected or not — with the score that decided it and the reason it was dropped.
Ingestion
Pipeline, last 24h
Why candidates were rejected
| Reason | 24h | All |
|---|
Sources
| Source | Trust | Policy | State | Items | Accepted | Last item |
|---|
Recent items
Select an item to see its spans, its candidates and the decision each one received — and the raw bytes it was derived from.
Connected systems
This deployment
Freshness of the stored copy
Poller
Declared systems
| System | Access | Kind | Credential reference | Installed here |
|---|
Read tools
| Tool | Health | 24h calls | Errors | Last success |
|---|
MCP server
Server
Authority
Exposed surface
| Tool | Scope | Read-only | What it does |
|---|
Credentials that could connect
| Token | Principal | Scopes | Days to expiry | Last used |
|---|
Clients that have called
| Principal | Calls | Executed | Refused | Last call | Decided at |
|---|
Control
The kill switch shipped in Block 2, because stopping the system must never wait for the machinery that decides what it may do. Block 7 adds the capability tree below and makes these buttons bite: policy rule 2 now reads the engaged level and refuses.
Kill switch
Local reach
Stop L5
Stops the worker process itself. It is deliberately not a button: ADR-0018 gives L5 its own mechanism precisely because it must work when our code is misbehaving, and a button that calls this API would depend on the thing it is stopping.
pm2 stop jarvis-workerWaiting for you
Each one authorises exactly one execution of exactly one payload, by the principal that asked, before it expires. It creates no standing permission, and it cannot be spent twice.
loading…
Capabilities
What this system may do, what it may never do, and — for anything with a handler — whether it is currently usable. A capability with no live grant is ungranted; one that can never have a grant is permanently unassigned, and the two are deliberately not the same colour.
loading…
Grants
Every grant expires — the column is NOT NULL and the guard lets it only move closer. Block 7 created the table and issued nothing; Block 13 · D6 built the first writer it has ever had, and this deployment has issued no live grant.
loading…
Standing grants, soonest to expire first
| Capability | Scope | Level | Days to expiry | Granted by |
|---|
Revoked and expired
| Capability | Scope | Level | Ended | Calls under it | Reason |
|---|
Tool board
loading…
The policy truth table
The evaluation order is fixed so it cannot vary between call sites, and every branch ends in DENY unless something explicitly permits. This is rendered from the same constant the engine is tested against.
loading…
Ask
Answers come from JARVIS's own recorded memory and cite the rows they came from. Every citation is checked by code against what this turn actually retrieved — a plausible-looking reference to something that was never retrieved is recorded as a defect, not shown as a source.
Answer
Nothing asked yet.
Live execution
- The stream opens when a turn starts.
[why]
Ask something, or pick a turn below.
Recent turns
Knowledge
Entities, typed edges and when each was true. Restricted scopes are excluded from these reads by the database, not by this page.
Entities
Select an entity to see its attributes, edges, subgraph and timeline.
Documents
Loading…
Select a document to see its chunk map, its extracted entities and a link that opens the original at the cited page.
Research
Loading…
Select a research run to see the question, the sources consulted with their reliability, the claims with their citations, and any conflicts.
Memory
What is believed, why, and what disagrees. Every confidence here shows its arithmetic and every claim shows the literal words it rests on.
Contradictions
Memories
Inferences
Select a memory to see why it is believed.
Activity
Every state change and every refusal, with the authority that permitted it.
Tasks
Work that outlives the turn that asked for it. A task accumulates no authority: every step is authorised on its own, at the moment it runs, by a policy decision taken then and not when the plan was made.
loading…
Failures nobody has explained
A write whose outcome is unknown — the call did not report back,
so we do not know whether it landed. It is never retried automatically:
that is how a duplicate payment happens. The capability is halted at level
1 until a person establishes what happened, and the step STAYS in
unknown_state afterwards, because "we did not know" does not
stop being true once somebody finds out.
loading…
Filter
Audit log
loading…
Tool invocations
Every call, executed or refused. Each one names the policy decision that permitted it — that column is ADR-0016's enforcement clause.
loading…
Signals
Pipeline
Notifications today
Rules
| Rule | Matches | Action | Importance | Mode | Shadow fires |
|---|
Event stream
| Event | Source | Occurred | Importance | Rules that fired |
|---|
Suppressed, and why
| Notification | Priority | Reason | Signal | When |
|---|
Notifications
The fatigue filter
Self-audit
| Notification | Priority | Interrupted | Reason | When |
|---|
Daily brief
loading…
History
| Period | Kind | Sections | Events | Generated |
|---|
Decision reviews due
loading…