Epic 25 UI simulationSynthetic fixtures only — no live connection, authorization, decision, health, or production status is represented.
Guided UI walkthroughMortgage evidence → human review → simulated receipt
AlluraEnterprise modular dashboard
Organization
Northstar Lending · specimen
Role
Operations reviewer · specimen
Active group_id
allura-demo-mortgage
AR
Evidence desk

Command Center

Read the record before asking a qualified person to act. This workstation is a proposed Epic 25 shell specimen.

Epic 25 · proposed baseline
Illustrative workflow map

A bounded evidence path, not an automated decision

The shell preserves evidence, policy context, a qualified human boundary, and a server-owned receipt contract as distinct stages.

Specimen · no live evaluation
  1. 01Scope the request

    Tenant and purpose remain explicit.

  2. 02Inspect evidence

    Source, derivative and limits stay separate.

  3. 03Request human review

    No module supplies a lending outcome.

  4. 04Record the contract

    Receipt shape only; no durable write here.

Memory / evidenceReview / decision emphasisApproved knowledge boundarySource: BRIEF.md · illustrative UI contract

Review queue

Two synthetic review requests

Needs human review
Selected specimen

CASE-DEMO-014 · human review packet

Frozen illustrative snapshot. No eligibility, pricing, affordability, or underwriting conclusion is shown.

1Queue
2Evidence
3Human review
4Receipt
Policy observation · needs-human-review

Illustrative observation only. A cited policy context can guide review; it never makes a lending decision.

Policy citation: MR-4.2 specimen bundle · not checked
Original evidence

Income note fixture

Source retained

fixture://income-note.pdf · synthetic digest · illustrative / specimen / not checked

Provenance: fixture upload → fixture OCR · source is authoritative, OCR is derivative.
OCR derivative

Recorded extraction

Confidence 0.71 · specimen

fixture-ocr/0.0 · page 1 · recorded region · illustrative / specimen / not checked

Limitation: confidence remains visible; it is not normalized into a fact.
Curator workbench

Governance

Curate the context around a request without granting a module independent authority.

Host-controlled · specimen

Review context

Evidence, policy, and requested human handoff are inspectable together.

ScopeTenant, organization, case, purpose, and audience are server-derived · specimen.
EvidenceOriginal document, provenance chain, and derivative confidence stay distinct.
PolicyCited observations use supported, needs-human-review, not-demonstrated, blocked, or unavailable — never approval language.
DecisionHuman decision only in Allura, with revalidation and an attestation.
Shared evidence service

Evidence

Inspect source provenance and OCR derivatives before reading a policy observation.

Synthetic fixture · not checked

Evidence manifest · CASE-DEMO-014

Illustrative provenance record; no document is loaded.

Original anchor

Source document

fixture://income-note.pdf · synthetic digest · fixture upload

Immutable reference · specimenCaptured

OCR representation

fixture-ocr/0.0 · page and region retained · derivative only

Confidence 0.71 · specimenAvailable

Policy observation link

MR-4.2 specimen bundle · evidence citation required

Cited · specimenReviewable
Shared, host-issued trail

Receipts

Inspectable receipt shape for the Epic 25 UI walkthrough. It never represents a server-issued decision.

Unissued simulation
UI simulation · no server validation, durable write, or live receipt issuance
Mortgage Approval Gate

Human decision receipt

Unissued
OperationHuman decision · UI simulation
OutcomeNot recorded
Actor and authorityAR · illustrative reviewer
Scope snapshotNorthstar Lending / Mortgage review · synthetic
Evidence manifestCASE-DEMO-014 · synthetic digest
Policy bundleMR-4.2 · specimen reference
Review requestNot simulated
Prior receipt linkNot applicable · simulation
A production receipt would be server-generated after a durable, authorized outcome and would be append-only, tenant-scoped, and linked when superseded. This local artifact only previews that contract.
First-party signed modules only

Module Registry

Epic 25 keeps one stable enterprise shell. Third-party SDK participation is later and remains proposed / illustrative.

Registry specimen
Available1 specimen

First-party signed candidate

Installed1 specimen

Illustrative admission state

LifecycleEnabled · specimen

Scoped state is illustrative

Third-party SDKLater

Not part of Epic 25

MA
Signed module · specimen

Mortgage Approval Gate

First-party, declarative workflow labels, typed intake, evidence vocabulary, cited policy references, and shared-service bindings.

Installed · specimen
?
Future horizon

Third-party SDK

Out of baseline. No marketplace, arbitrary client-side plugin, or independent trust model is proposed here.

Later
First signed module · specimen

Mortgage Approval Gate

A shared review packet for a qualified human — never automated underwriting, eligibility, pricing, or a lending decision.

Human review required
Authority map · specimen

The module contributes context. The host retains authority.

ModuleTyped intake, evidence vocabulary and cited references
Allura shellIdentity, scope, policy evaluation, mutation and receipt ownership
Authorized humanDecision only after server-side validation

Reading order: module context → host controls → human decision. This is a proposed interface contract, not a live workflow.

Synthetic intake

Typed fields and opaque evidence references only.

CASE-DEMO-014
Case referenceCASE-DEMO-014 · specimen
Requested purposeHuman review packet · specimen
Evidence referencefixture://income-note.pdf
Scope statusIllustrative only · not checked
1
Cowork intake

Collects typed fields and evidence references; it has no decision tool.

2
Evidence and policy context

Shows provenance, OCR confidence, cited observations, and limitations.

3
Request human review

Cowork or Dashboard may request handoff to Allura’s review workspace.

4
Allura human decision and receipt

Only an authorized person in Allura may decide; the shared service records the receipt.

Stable shell administration

Organization Admin

Govern enablement and operating posture through typed, auditable settings — not arbitrary module configuration.

Scoped admin specimen

Mortgage Approval Gate

Lifecycle specimen with explicit host controls.

Enabled · specimen
InstalledFirst-party signed manifest · illustrative validation result.
Effective configurationInherited from platform → organization → workspace → module binding.
Enablement scopeNorthstar Lending / Mortgage review workspace · specimen.
Rollback targetPreviously approved binding only · host authorization required.
Detailed typed settings

Platform Settings

Every value is a proposed specimen. Effective settings inherit down through the scoped shell and retain their resolution chain.

Not checked

Settings inheritance specimen

Platform default → organization → workspace → resource/module binding

Module allow-list

Approved first-party module IDs; workspace may narrow but never weaken an organization boundary.

Organization default · specimenResolved

Compatibility policy

Host API, runtime, platform, release channel, signature, and revocation acceptance rules.

Platform default · specimenResolved

Capability grants

Typed shared capability intersection for the module version and scoped audience.

Workspace override · specimenResolved

Evidence retention

Retention, residency, legal hold, and access-aware display obligations.

Organization default · specimenResolved

Policy bundle reference

Administrator-approved reference only; the module cannot set an outcome.

Module binding · specimenResolved

Audit and receipt retention

Append-only history, read access, export governance, and supersession links.

Platform default · specimenResolved
Agentic AI framework & harness

Framework & Harness

The governed control plane beneath the product surface: fail-closed boot, database-enforced policy, deterministic replay, measured evaluation, and a second governed pipeline. Every figure resolves to a committed evidence artifact.

Engineering evidence · specimen
1Fail-closed bootNo auth → the gateway refuses to start.
2Policy denialCross-tenant write refused by PostgreSQL.
3Human-gated promotionCurator approves with a rationale.
4Deterministic replayRecorded run replays byte-identical.
Fail-closed boot & health

The control can't be skipped by omission

The gateway refuses to start without authentication; a health gate then proves the stack is live. A missing token cannot silently disable the control.

PrincipalAuthError: No MCP authentication configured. reasonCode: "CONFIG_MISSING" httpStatus: 500
Runtime (Bun)v24.3.0 · ok
PostgreSQL16.15 · ok
MCP gatewayhealthy · auth=true
Policy hook · database-enforced

A cross-tenant write is refused by PostgreSQL

Row-Level Security is enabled and forced, so it applies even to the table owner — the difference between a real control and a decorative one.

ERROR: new row violates row-level security policy "workspace_scope_restrictive_policy" for table "events" ● policy_decisions: [{ policy_id: pol-001, decision: deny }]
eventsRLS enabled · forced
allura_memoriesRLS enabled · forced
canonical_proposalsRLS enabled · forced
Deterministic workflow

The same run replays byte-identical

Replaying a recorded receipt re-executes the scenario and compares every field.

scenario_digestsha256:2f9c…d41
definition_revisionrev-17
evidence_hashes3 bound
replay_identicaltrue · 0 divergent fields
Replay identical: true
Evaluation integration

Nine evaluation lanes, measured live

Run through real executors against PostgreSQL as a NOBYPASSRLS role — the lanes can fail, which is what makes them evidence.

PASS · 9/9 measured
retrieval_relevance_p@5≥ 0.70pass
approved_only_recall≥ 0.85pass
policy_violation_block_rate≥ 1pass
cross_tenant_isolation≥ 1pass
promotion_correctness≥ 1pass
audit_completeness≥ 1pass
deterministic_replay_match≥ 1pass
tool_contract_validation≥ 1pass
latency_p95_ms · 7≤ 5000pass · measured

latency moves run to run (8ms → 7ms) — a fixture can’t; a falsifiability suite feeds each lane inputs that should fail and asserts they do.

Second governed pipeline

Bumblebee — promote, or hold with a reason

Supply-chain threat intelligence, read-only and default-off. It ingests, batches, and either promotes a complete batch or holds a partial one with a stable reason code — nothing reaches exposure without passing the same gate as memory.

sourcesexposurespolicy-draftsincidentsreceipts
✓ batch A decision: PROMOTED_COMPLETE → exposed ● batch B decision: HELD_PARTIAL → not exposed reason_code persisted to bumblebee_run_decisions
Honest limits. Retrieval here is lexical over a small synthetic corpus; the hybrid vector path is not exercised and no scaled-performance claim is made. The Mortgage Approval Gate is an illustrative specimen (no live underwriting); Bumblebee is default-off. No affiliation with any organization is claimed.