Public website
Responsive homepage, multilingual routes and evidence-aware claims.
Phase Portal-5.5
Editorial command center
Control the public XPScerpto interface with visual CMS tools, staging workflow, preview tokens, media library, page/block locks, version conflicts, evidence panels, users and multilingual content from one protected plane.
Backend real—Python portal backend
Native runtime—Truth-gated attachment
Production ready—Computed, not editable
Evidence reports—Public/private manager
Live runtime demo
Backend-backed encode/decode and attack rejection without native C++ claims.
Open demoDesign system
Primary color, radius, typography scale, density and controlled CSS.
Evidence gate
Production-ready stays false until native attachment and qualifying evidence exist.
Production gate detail
Loading…
P6.6 Sovereign UI Productization
Professional no-external-dependency control surface
This view verifies that the public site, user workspace, admin studio, and root-control plane are presented as a coherent sovereign product without CDN, external fonts, external scripts, or fake runtime telemetry.
Surface map
Local asset authority
The scan must stay clean: no http(s), CDN import, remote font, analytics, or external script reference inside static UI assets.
Loading…
Full UI productization report
Loading…
P6.7 Homepage Master + P6.7.1 Control Reliability
Homepage command surface
A dedicated admin view for the redesigned public homepage. It exposes navigation completeness, required homepage blocks, local-only dependency posture, and direct actions to edit, inspect, preview, or verify the public home without claiming native runtime production readiness.
Navigation completeness
Required homepage blocks
Loading…
Homepage master report
Loading…
SaaS Cockpit
Operational CMS cockpit
A product-style operations layer for page workflow, content health, evidence risk, recent activity and editorial command search. It is still truth-gated: native runtime remains separate from the portal UI.
Workflow board
Pages grouped by draft/review/staged/published/hidden. Click any item to select it.
Content health
Loading…
Command palette
Search pages, routes and languages from the SaaS cockpit.
Recent activity
Evidence stream
Cockpit JSON
Loading…
Multilingual content matrix
Editorial overview for Arabic, English and German pages. Each language cell now opens the real page variant for editing, and missing variants can be created as draft copies without mutating the source language.
Sovereign runtime policy controls
Controls public runtime exposure, evidence retention, telemetry limits and production burn-in thresholds. Python substitute runtime remains disabled by policy.
Sealed policy capsule
Not loaded.
Local asset authority manifest
Scans static files for local-only loading, hashes every asset and exposes a manifest seal.
Not loaded.
Portal speed check
Measures the Python portal route/render path only. It is not XPScerpto native C++ runtime performance evidence.
Not run yet.
Pages & SEO
Create page
No page selected
Select a page to inspect locks, archive state and permissions.
Language variants
Choose EN / AR / DE to load the matching page_key variant. Missing variants are created as separate drafts; this does not change the current page language.
Select a page to inspect language variants.
Use Language variants above to switch content. Direct language mutation is blocked.
Version history
Page lifecycle control
Strong editorial operations for the selected page. Archive hides the public route; restore returns it to draft; permanent delete is owner-only and blocked for protected core pages.
No page selected.
Duplicate / fork page
Create a safe draft copy with blocks, then edit/publish it independently.
Bulk action
Uses the visible selected page list. Apply carefully; every mutation is audit-logged.
Blocks for selected page
Supported types: hero, text_panel, feature_grid, authority_chain, architecture_flow, runtime_status, evidence_summary, performance_table, live_demo, callout, quote, docs_links, contact_form, html_block. Block edits are versioned and can be reordered from this view.
Quick templates
Create / update block
Design tokens
Custom JS is blocked unless owner explicitly acknowledges risk through the API. The UI intentionally exposes CSS only.
SaaS visual presets
Apply controlled token presets for a stronger public interface. Every change is audit-logged.
Media Library
Upload public/private images, SVG, PDF and JSON evidence assets. Public assets are served through /media/<id>/file with ETag and cache headers; private media is blocked outside an authenticated session.
Assets
Register evidence
Evidence reports
Contact/demo requests
Create admin user
Owner-only. Use viewer for read-only audit/evidence access, editor for content changes, owner for users and destructive controls.
Users & roles
Audit log
Runtime Truth Contract
Loading…
Native XPScerpto runtime connector
Configure the external XPScerpto native runtime adapter. Live-Demo runs platform units only through this connector and fails closed when detached.
Not probed.
Run real unit
This calls --portal-run-unit on the configured native CLI. Without native attachment the request returns 424 and no Python substitute runs.
No native unit run yet.
P6.8 Page Builder+
Runtime-aware page builder control
A unified control surface for page sections, templates, preview/versioning, evidence-bound claims and language-safe editing. This view intentionally reuses the existing sealed CMS primitives instead of creating an unsafe parallel editor.
Builder primitives
Template inventory
Runtime SaaS Evidence Report
Not loaded.
P6.8 Language Dashboard
Side-by-side language parity and drift control
Tracks missing variants, stale versions, structure drift and RTL review needs across EN / AR / DE without mutating page language identity directly.
Variant parity table
Language dashboard JSON
Not loaded.
P6.8 Security Center
Audit chain, sessions, CSRF and boundary visibility
Consolidates admin audit chain verification, failed login tracking, root isolation, app traces, asset scan and security counters.
Security counters
Audit chain
Not loaded.
Security center JSON
Not loaded.
P6.8 Evidence Center
Public proof surface without production overclaim
Displays runtime truth, adapter contract, latest public evidence, language parity summary, sealed asset manifest and fail-closed posture.
Runtime adapter
Not loaded.
Latest evidence
Not loaded.
Evidence center JSON
Not loaded.
P6.8 Deployment Readiness
Private staging and production blockers
A strict release checklist: secrets, native runtime, root token, HTTPS cookie posture, asset manifest, database and backup/restore readiness.
Blockers
Required before public release
Deployment readiness JSON
Not loaded.
Production deployment readiness pack
This is a deployment helper, not a production-ready claim. It lists included nginx/systemd/env/backup/reset helpers and the live backend truth contract.
Not loaded.