Every action drives the same audited APIs as the MCP server (/r/8832) — no console-only side doors. New facility · service page
Liveness + freshness stamp of this Werft instance.
Process versions installable by the Tenant Factory (/r/8831).
Enrollment state, preflight history and signed snapshots come from the live Bastion integration (B1/B5). Until the facility runs its own Bastion endpoint, this view stays honestly empty — no pretended live state (#643).
Everything the factory produces — reports, screenshots, evidence bundles — with the provenance chain order → session → artifact → environment (/r/8835). The shelf is live via the MCP tools (werft_artifact_list/get, tenant-secure with expiring links); the console view stays gated until the console has session auth — tenant-secure by construction, no open endpoint (#643).
Roles/principals and the token inventory with scope review flags depend on the Atlas scoped-token model (/r/8819). Gated until that feature ships.
Read-only: shows the human-readable diff; tenant-local rules stay untouched (/r/8831 acceptance #3).
Read-only validation via POST /api/facilities/plan — exactly what Factory (/r/8829) and Day-0 (/r/8830) would execute.