Training scenarios — sets link up/down on the live fabric.
Node up / down / delete
Take a device offline (or bring it back) for drills. Delete removes node + incident links.
Path advisor
BFS over up links — logistics / training reachability.
—
Add node
Add link
Add CIDR
Inventory
loading…
DNS & Routing
Live resolver, SVI realism, teaching routes from fabric
DNS A record
…
VLAN (router/switch realism)
…
Routing protocols (SIM from fabric)
…
Site Builder
One-shot site stack for training locations
Creates site + PE + access SW + AP + CIDRs + VLANs + WAN uplinks + DNS. Completes infrastructure for a new training location.
After deploy
Join Terminal seats pe-hub / pe-trader / pe-fob / pe-outpost / pe-edge, or build a custom PE node and use gear seats.
World context: district-zero
World / Population operations
Denizen Watch
Observe the living simulation, its organizations, dependencies, and human-operated seats
Multi-world engine
Live shards
All living worlds from shared SoR. Ticked here = this Host process runs their breath. Surgical multi-Host: assign exclusive DDNOS_TICK_WORLD_SLUGS per process so ticks do not collide.
process filter…
Slug
Kind
Pop
Players
Target
Breath
Tick age
Wall ms
Headroom
Lease owner
Ticked here
Entity boundary Simulated denizens use soft DeviceLife Human operators use authenticated seats Service identities remain control-plane actors
Breath
—
Citizens
—
Avg energy
—
Pulses
—
Last pulse
—
Factions
—
Seats · live operators
Operators in Terminal. Row actions: Kick (world) · TX off/on. Realm-wide revoke stays under Sessions.
Callsign
User
Faction
Seat
Site
Host
Actions
Citizens · district
Ops truth: district denizens that keep the world breathing. Prefer “citizens” not “NPC”.
loading…
Population registry
Census
Find a resident by name, role, employer, or current state
—
Callsign
Role
Status
Employer
Site
E%
Sig
Credits
Fail
Resident profile
Select a denizen
No resident selectedChoose “View profile” in the census to see their work, intent, personality, and conversations.
Employer board
—
Dependency loop
Life systems
home → commute → workplace work → fabric fail → reaction → wages
—
—
Ledger recent
—
Kit traffic · SMS / mail / voice
—
Presence by site
—
Recent district events
—
World / Spatial operations
World Map
Host-authoritative geography, presence, movement, and infrastructure dependencies
Drag to pan · wheel to zoom · Fit fills active terrain · All shows the full plate.
Markers = Host truth (places · densizens · ops). Underlay = presentation style pack / plate ops art —
never path on basemap pixels · never client GPS as authority.
View
100%—truth —
Live layers
Atlas image layers
Loading atlas manifest…
Block ops · drills (mutates world)
HOST PLATE · STYLE UNDERLAY
N↑
underlay — · markers Host · GPS diegetic
phase —
Edit authority is MapReview (Dev Toolbox elevated handoff) — this plate is ops presence / GPS review only.
Soft GPS · pin-QA · multi-region scaffold plates continue under Host truth.
Trainer scenario placement (preview · no new world)
Select a building/customer marker, then preview placement…
Projection / tracking truth
Refresh map to load projection audit…
Systems & Fleet
Channel packages + seat posture
Compliance
loading…
Channel packages
—
Campaigns (soft world engine)
First-class campaigns.read/write. Diegetic plant/seat SIM soft-patch only — never process Host OS. In-realm scorebook (weighted grades/transcripts) — not external accreditation. Mesh Client U9 HOLD — Terminal face only.
Who is signed in · kick seats · sign out devices · mute TX
Signed-in devices
User
Where
ID
No active sign-ins
Live world seats · —
Callsign
User
Faction
Seat
Site
Host
Actions
No one is seated in this world
Sign someone out
Kick on a row only drops their world seat. This form revokes sign-in (they must log in again). Check realm-wide for all devices.
Mute transmit (enrollment)
Blocks their world TX without wiping the auth token. They must be enrolled.
Access Desk
Player Terminal join · world enrollment · least privilege
Three separate layers (do not mix them up)
Account — can they sign in at all? (username + password)
Enrollment — which world may they enter in Terminal? (body / living loop)
Glass role — what may they do in Looking Glass? (ops / trainer / admin)
Assigning ops or instructor does not put someone in a world.
Enrolling in a world does not grant Looking Glass control powers.
Terminal play only needs: account + enrollment + TX not muted.
1 · Put a player in a world (Terminal)
Uses the same host APIs as Accounts / Enrollments — permissions still required. Step-up when creating accounts.
After success: player opens Terminal → signs in → picks that world → Enter world.
2 · Who needs what (RBAC cheat sheet)
Role
For
Glass
World join
player
Players / testers
Account hub only
Needs enrollment
instructor
Trainers
Scoped world ops
Still needs enrollment to play
ops
Ops managers
Fabric · sessions · sim
Still needs enrollment to play
admin
Realm operators
Full control plane
Still needs enrollment to play
Instructors: assign role with scope world:district-zero (not global) under
.
Superadmin and instructor@global are blocked by Host.
3 · Closed alpha invite path
Self-register with an invite code → Host may auto-enroll into the invite’s world.
Roster in scope · district-zero
User
Callsign
Faction
Line
TX
Account
Recover
(no enrollments in this world)
LM-P1-7: TX-OFF blocks Terminal play — use Allow TX on the row to recover without re-enrolling.
Glass roles only here. To let someone play Terminal in a world, use
or Enrollments — role assign ≠ world join.
User
Display
Roles
2FA
Enabled
Create account
Enable / password
Assign / revoke role
Requires accounts.roles.assign (global admin).
Hints
World instructors use scope world:district-zero. Disable revokes auth sessions. Prefer least privilege; rotate credentials after bootstrap.
World Enrollments
Who may join the active world scope (top bar) in Terminal
Scoped by top-bar World scope. Prefer
for create+enroll in one step. Permission: worlds.enroll.
Roster · district-zero
User
Callsign
Faction
Line
TX
Account
(no enrollments)
Enroll player
Update / remove
Security & Identity
TOTP for control-plane operators · service bots exempt
Your 2FA
—
Account
—
Control-plane posture
Live checklist for this operator session. Mandatory 2FA should be enabled after enrollment is confirmed.
○ Loading…
Enroll authenticator
Scan secret into Google Authenticator / Aegis / 1Password, then confirm a code. Do this before enabling mandatory 2FA on the host.
(not started)
Disable 2FA
Service accounts (watchtower, ths-ai1) skip TOTP for Discord bot login. Passwords live only in your lockbox — never in this UI.
My profile
SSO-only accounts: leave current password blank to set first local password.
Linked SSO
Google / Microsoft SSO. Link only when this realm has been approved for provider sign-in. See SSO transparency.
(none)
SSO not configured on this Host — password / TOTP only.
Desktop world feed
Mint a read-only PAT for a local Rainmeter bridge (observer glass).
Never put the raw token in a skin .ini — only the bridge holds it.
Scopes: feed.read + worlds.list · no tickets / move / admin.
Raw token is shown once below. Store only in the local bridge.
(no new token yet)
Name
Expires
Status
—
Access Invites
Multi-use codes for closed registration
Active
Id
Prefix
Uses
Status
Note
(no invite codes)
Create invite
(code shown once)
Revoke
Realm-level invite policy may also allow a controlled shared-code flow.
Watchtower Communications
Looking Glass control — bot polls Host; Discord token never here
Agent
—
Desired
—
World
—
Queued
—
Last seen · Discord · errors
Announce to Discord
Queues a message; bot delivers when online. @everyone/@here stripped. Needs ops.broadcast.
Recent commands
—
The bot credential lives only on the bot host. This tab never stores Discord secrets.
Operations / living spine
World Soft Ops
SAFE soft rebuild · D0 convert · spin-up · seed · IR pilot — never wipe densizens · never touch process Host OS
Creates a new isolation world. Never overwrites district-zero densizens. Plates are not targets.
D · Seed recipes
Host recipe catalog → ensure-from-recipe on a non-D0 slug (or living recipe rules).
E · IR pilot (SIM instructor glass)
Network IR pack · ensure · inject · list completions · CSV grade export.
SIM ROE only — no real recon/exploits · not professional certification.
Last soft-ops result
—
Chronicle
Append-only story / ops history (not fabric truth)
Entries
loading…
Append entry
Filter
World-scoped. Visibility defaults to ops-only. Requires audit.read to list, fabric.admin to append.
Platform / packages · retention · health
Platform Operations
Client package glass · retention · host health · face honesty
host: —db: —schema: —provider: —face: own-face-3d
Client packages (alpha · win-x64)
Public manifests — Terminal = player face · Dev Toolbox = ops · Official Setup = bootstrapper. Opaque tickets only (session). Host paints version; face draws Host samples.
