An Operations Portal Should Not Become a Web Terminal
Convenient arbitrary shell access would collapse the separation between reviewed operations and unrestricted host control.
Ops Portal
Deployment Records Without Commit SHAs Are Operational Debt
When a deployment fails later, the first forensic question is which reviewed source revision actually produced it.
Stale Telemetry Should Not Render as Healthy
A last-known-good value becomes misleading when the system does not show how old the evidence is.
One Missing Semicolon Broke HTML Escaping in the Command Center
Tiny output-encoding defects matter more in admin surfaces because they render operational data from many sources.
Evidence Freshness Belongs in the Operator UI
A production acceptance result should carry age and policy, not just a green badge.
Least-Privilege Backup Receipts Let Operators Verify Without Reading the Backups
Operators need evidence that backups succeeded without necessarily gaining access to the protected data itself.