Werft Console — facility health, seeds & plans

Every action drives the same audited APIs as the MCP server (/r/8832) — no console-only side doors. New facility · service page

Facility health

loading /healthz …

Liveness + freshness stamp of this Werft instance.

Governance Seeds

loading /api/seeds …

    Process versions installable by the Tenant Factory (/r/8831).

    Machine detail gated

    Enrollment state, preflight history and signed snapshots come from the live Bastion integration (B1/B5). Until the facility runs its own Bastion endpoint, this view stays honestly empty — no pretended live state (#643).

    Artifact shelf gated

    Everything the factory produces — reports, screenshots, evidence bundles — with the provenance chain order → session → artifact → environment (/r/8835). The shelf is live via the MCP tools (werft_artifact_list/get, tenant-secure with expiring links); the console view stays gated until the console has session auth — tenant-secure by construction, no open endpoint (#643).

    Tenant detail gated

    Roles/principals and the token inventory with scope review flags depend on the Atlas scoped-token model (/r/8819). Gated until that feature ships.

    Seed upgrade preview

    Read-only: shows the human-readable diff; tenant-local rules stay untouched (/r/8831 acceptance #3).

    Facility plan (manifest → factory + bootstrap)

    Read-only validation via POST /api/facilities/plan — exactly what Factory (/r/8829) and Day-0 (/r/8830) would execute.