Performance computed from the Data Store and the audit trail — never self-reported by a model. Each station below leads with the same reading its documentation shows, so the console and the reference cannot drift apart. Idle is a state, not a gap: a slot with no invocations is watched and shown as idle, and a slot with no model at all is shown as unstaffed rather than omitted.

Alert console

Acknowledging is audited under your name. A condition that recurs after acknowledgment re-fires — alerts never auto-close, and nothing here can be dismissed without leaving a trace.

Stations — every capability slot

Instruments — live readings per slot

The same dashboards the model documentation renders, gathered here in one console. Open the ones you are watching; the rest stay closed so the panel keeps its shape.

System telemetry — the gates, not the models

Signals that belong to no single model. Refusals are a health reading, not an error log: a system that never refuses anything is either not being asked hard questions or is not checking. The scope tripwire is the exception — it should read zero, and any other number is a defect.