Safety · Egbe operator console

Purpose#

Unified operator surface for Egbe companion welfare, steward conduct, behavior telemetry, foundry generation governance, and deployed operator surfaces. It keeps Care, coercion, cognition, consent, provenance, and policy evidence adjacent before an operator opens a Lilith review or takes a governed action.

Entry points#

• Direct route /egbe; missing sessions redirect to the unauthorized page.
• OSHUN_ADMIN_WORKSPACE_MODEL.egbe places the workspace in Safety and declares admin:*, admin:studio, or admin:workspace:egbe access.
• AdminShell sidebar entry “Egbe.”

Layout regions#

• Workspace entry: access/degraded context from loadWorkspaceDetail('egbe').
• Agent welfare: summary metrics, per-agent signals, Ori/cognition evidence, and Lilith-review audit trail.
• Steward conduct: claim queue and selected investigation joining steward actions to cognition calls and policy gates.
• Behavior telemetry: metric panels, sample detail, per-tier cognition cost, and consent/training posture.
• Foundry generation: job queue, governing checks, generated artifacts, provenance bundle, and audit events.
• Operator surfaces: commons moderation, incarnation governance, capacity, takedown, policy checks, evidence, and action history.

States#

• Accessible — workspace detail permits the five operator panels.
• Denied / degraded — WorkspaceEntryPoint explains inaccessible or unavailable workspace data without rendering protected panels.
• Flagged / under review — welfare metrics and case audit update together.
• Claim open / investigating — selected conduct claim exposes available call logs and policy evidence.
• Generation pending / complete / blocked — job detail names every governing-check result and whether artifacts are inspectable.
• Operator surface actionable / blocked — actions respect policy checks and expose resulting audit state.
• Mobile — long evidence ids, metric grids, queues, and audit lists wrap without horizontal document overflow.

Interactions#

• Open Lilith review locally transforms a flagged welfare case to under-review and appends operator audit evidence.
• Inspect conduct claim selects the investigation and locally records an opened-review event.
• Select telemetry panel swaps the sample-detail region.
• Inspect generation job selects policy, artifact, provenance, and audit detail for the job.
• Open operator surface action updates the selected surface and its local governed state when the action is allowed.

Data & contracts#

• Reads: loadWorkspaceDetail('egbe'); default panel state is created from @oshun/lilith-agent-welfare and @oshun/egbe-studio domain packages.
• Writes: panel actions currently fold pure domain operations into local React state; there is no BFF mutation or persistence from these panels.
• Auth: the shared workspace loader determines detail.accessible; panels render only when true.
• Telemetry: the behavior panel carries an OTel batch/exporter description, but the page does not subscribe to a live telemetry stream.

Cross-references#

• IA: libs/oshun/navigation/src/admin-ia.ts#egbe
• Welfare package: libs/oshun/lilith-agent-welfare/
• Studio package: libs/oshun/egbe-studio/
• Browser coverage: apps/oshun/admin/e2e/egbe-*.spec.ts

Open questions / known gaps#

• Replace locally folded reviews/actions with scoped, conflict-aware, durable BFF mutations and canonical audit ids.
• Bind welfare, cognition, foundry, and telemetry panels to freshness-labelled reads; keep a clear degraded state for every provider.