Agent Manager

Action Panel

Operator Controls

dashboard-read-onlyread-onlydangerous-write disabled

Authority Surface

Public Vault dashboard, Supabase anon REST reads, and public /bt JSON files

The manager has telemetry visibility for Vault but no remote write/control contract yet.

Verification Contract

Read freshness is verified through Supabase/dashboard data. No Vault action performs a remote mutation.

0 real wired0 stubbed5 blocked0 live1 gated4 disabled

This agent is still effectively read-only from the manager. The panel distinguishes live controls from gated and unavailable ones so we never imply write access that the manager does not actually own yet.

Safe Requests

Pause entries

safeintentionally blockeddisabled

Stops new entries while leaving current positions and exits alone.

Vault metrics are live, but the manager does not own a matching live control contract for the remote demo system yet.

Verification After Request

No pause is attempted. Vault needs a bot-owned runtime-control contract before this can become a safe write.

This control stays unavailable until a real contract exists.

Resume entries

safeintentionally blockeddisabled

Re-opens the entry gate after a pause.

Vault metrics are live, but the manager does not own a matching live control contract for the remote demo system yet.

Verification After Request

No resume is attempted. Vault needs a bot-owned runtime-control contract before this can become a safe write.

This control stays unavailable until a real contract exists.

Restart agent

safeintentionally blockeddisabled

Requests an agent restart without changing its configuration.

No manager-owned restart contract is wired for the live Vault demo surface yet.

Verification After Request

No restart is attempted. Restart remains blocked until a restricted remote control identity and post-health check exist.

This control stays unavailable until a real contract exists.

Set position limit

safeintentionally blockeddisabled

Adjusts the position limit, but this UI pass does not expose the numeric payload yet.

This needs both a numeric payload UI and a real live control endpoint for Vault.

Verification After Request

No limit update is attempted. This needs a numeric payload UI plus a Vault-owned control endpoint.

This control stays unavailable until a real contract exists.

Dangerous Requests

Reset demo

dangerousintentionally blockedgated

Resets the demo run. This should always require an explicit confirmation step.

Vault reset remains locked until a real control endpoint and stronger confirmation flow exist.

Verification After Request

No reset is attempted. The backend returns a gated response only.

This path remains blocked behind stronger confirmation and audit wiring.