Fictional development tenant
Operations home
FICTIONAL SAMPLE DATA. This system records administrative evidence; it does not determine airworthiness or legal authority.
Operational maintenance dashboard for planners, leads, and maintenance managers. Administration and HR controls remain in the sidebar.
Due & scheduling
Critical operational state
Administration snapshot
HR and onboarding controls remain available under People, Training, and Account security.
Authority boundary
Sign maintenance recordDisabled — regulatory boundary
Release to serviceDisabled — regulatory boundary
Organizational position is never sufficient. Effective grant, qualification, scope, assignment, and program context are evaluated independently.
Organization lifecycle
Organization activation, suspension, and archival require a separate authenticated platform-security operator workflow.
Branches
Invitation lifecycle
Create a customer organization, enable its portal, then invite an approved portal user. The customer sets a first password through the existing /reset-password email and signs in at the Customer Portal. This does not create employee membership or maintenance authority.
Customer organizations
Portal status
Portal users
Assigned aircraft
Employee directory
Membership administration
Lifecycle behavior
- Membership suspension revokes sessions.
- Assignments and company grants end.
- Open work must be transferred first.
- Maintenance and audit history is retained.
Configured templates
Credential records
Training status
Aircraft list
Select an aircraft to view its record foundation.
Selected-aircraft history
Timeline
Installed components
Configuration
Legacy aircraft attachment links
Controlled technical documents
Maintenance records
Operational lifecycle only. Customer authorization is commercial evidence; inspection results are not regulatory approval, signing, or return to service.
Requests and estimates
Work-order dashboard
Select a work order to view tasks, findings, parts, labor, inspections, and timeline.
Findings and corrective actions
Select a finding to view troubleshooting, corrective actions, verification, and history.
Parts and availability
Select a part to view its authorized component availability.
Component list
Select a component for its event history.
Related technical documents
Traceability boundary
History is append-only and actor-attributed. Installation and removal remain atomic aircraft transactions.
This module does not determine airworthiness, approve installation, sign records, or release an aircraft to service.
Positions
Installation history
Removal history
Digital component passport — a unified evidence and lifecycle record for a serialized component. It does not determine airworthiness, approve part eligibility, authorize installation, or enable return to service. A complete evidence record is never proof of airworthiness, and missing evidence is never proof of ineligibility. Sign and release-to-service remain disabled.
Classification
Condition
Evidence completeness
Life limits
Remaining life (deterministic evidence calculation only)
Usage evidence
Traceability documents
Custody & repair/overhaul history
Passport timeline
Classification policies (organization-level, versioned)
A published classification policy version is permanently immutable. Publishing a new version never edits an older one — the most recently published version for a code is simply treated as current.
Human-controlled operational quality workflow only. Inspection acceptance and internal sign-off do not determine airworthiness or authorize return to service.
Inspection detail and complete cycle
Select an inspection request.
Deterministic scheduling and due-status calculations only. Nothing here determines airworthiness, approves an inspection, or generates a binding return-to-service due date — humans authorize deferrals and close out maintenance-program requirements through the existing controlled work-order workflow.
Recent utilization — selected aircraft
Due-item planning & close loop
Work Order administrative closure alone does not accomplish a due item. Create a satisfies planning link, then explicitly record accomplishment using canonical aircraft utilization evidence.
Planning work links
Accomplishment history
Bays
Bay planning timeline
Shift allocations — selected schedule
Human-controlled inventory workflow only. Receiving acceptance and issue do not determine airworthiness, installation eligibility, inspection approval, or return to service.
Parts-request queue
Warehouses and bins
Current stock
Selected inventory record
Receiving-inspection queue
Transfer queue
Destination receipt uses the shipped quantity unless a reconciled quantity is entered. Explain every discrepancy.
A document relationship or library presence does not establish applicability, approved technical data, inspection authority, or return-to-service authority. Attachment presence is never an airworthiness determination.
Items requiring attention
Canonical attachment pipeline states and inventory/document-review conditions that need a human look. Malware quarantine, inventory receiving quarantine, and component-passport quarantine remain distinct.
Attachment scan / quarantine
Statuses from attachment_uploads.status: quarantined, scanning, clean, rejected, failed.
Inventory document review
Receiving rows waiting on documents or held for document review — not malware quarantine.
Component passport quarantine / incomplete evidence
Passport condition and evidence completeness only. Complete evidence is not proof of airworthiness or installation eligibility.
Document library
Loading documents…
Selected document
Select a document.
Revision history
Applicability and relationships
Access history
Metadata, history, and version downloads create append-only access and audit evidence.
My sessions
Current hosted identity links
Evidence-grounded maintenance knowledge assistant — retrieves authorized technical documents and internal maintenance history and cites its sources. It does not determine airworthiness, diagnose conclusively, select or approve a repair procedure, approve an inspection, approve return to service, or sign any record. Sign and release-to-service remain disabled. Always verify against current approved technical data and authorized personnel before performing or approving maintenance.
Ask a question
Source index status (administrators)
Append-only administrative audit
Operational reporting computed live from canonical Work Order, scheduling, quality/inspection, inventory, customer-authorization, procurement, commercial, component, and platform records. Counts, sums, and durations only — not a prediction, airworthiness determination, or regulatory-performance statement. Operations Home remains the action-oriented entry point; these reports are for deeper analysis.
Overview — current state (counts, as generated)
Snapshot as of —. Not date-ranged.
Open findings by severity & status (count)
Work Orders by status (count)
Operational coordination for shift handoffs, branch-to-branch transfers, AOG events, escalations, and aircraft/Work-Order discussions. Acknowledgment here means a message or status was received and reviewed — it never implies inspection acceptance, maintenance approval, regulatory sign-off, or return-to-service approval. Sign and release-to-service remain disabled.
Handoffs
In-app notifications and operational alerts surfaced from work orders, scheduling, findings, quality/inspections, inventory, customer authorization, compliance gates, and shift/branch/AOG coordination. Acknowledging or archiving a notification means it was received and reviewed — it never implies inspection acceptance, maintenance approval, regulatory sign-off, airworthiness determination, or return-to-service authority. Sign and release-to-service remain disabled.
Summary
Notifications
Automates the existing alert evaluator (Notifications & alerts) on a recurring schedule using a PostgreSQL-native background-job worker — no external queue or cron. Every run is leased so at most one worker process executes a given job definition at a time, and every run is recorded here with its evaluation window and outcome. This automates evaluation and delivery only; it never signs, releases to service, or grants any authority beyond what the underlying alert evaluator already has. Sign and release-to-service remain disabled.
Job definitions
Run history
Select a job definition above to view its recent runs, including the evaluation window each run covered and how many alert events/deliveries it produced.
Controlled, admin-only bulk import of legacy-system data (CSV/JSON only) into this platform's canonical records. Every import is staged, validated, duplicate-checked, dry-run, and requires a different person to approve than the one who prepared it before any canonical record is created — execution runs asynchronously through the same background-job worker used elsewhere. This never fabricates a signature, verified credential, or airworthiness determination from source data; imported claims are recorded as unverified until an authorized person reviews them.
Import projects
Mapping versions
Only a fixed, non-extensible set of field operations is supported (trim, case, enum_map, date_parse, timezone_convert, unit_convert, boolean_normalize, part_number_normalize, registration_normalize) — no formulas, scripts, or expressions. A published mapping version is immutable; publish a new version to change it.
Batches
Lifecycle actions
Each action only succeeds when the batch is in the matching lifecycle state; the server enforces every transition and reports why an action was refused.
Validation issues
Duplicate-candidate matches
Fuzzy matches are never auto-merged — every match here requires a human resolution before the batch can leave review.
Reconciliation report
Machine-to-machine connections for external systems to submit signed aircraft utilization evidence. A connection is a non-human service principal — it never inherits an employee's role, title, certificate, or technical authority, and it can never sign or release an aircraft to service. Every submitted reading is validated and only ever recorded through the same canonical utilization service used everywhere else in this system.
Overview
Connections
Connection detail
Scopes for selected connection
Credentials
A rotated credential's plaintext secret is shown exactly once, immediately below, and never again — store it securely now.
Aircraft mappings
Deterministic matches only — nothing here is ever auto-selected from a fuzzy or probabilistic match. Activation requires human approval before any submitted reading can be accepted against the mapped aircraft.
Inbound events
Exceptions queue
Exception detail
Outbound subscriptions
Deliveries are signed the same way inbound submissions are verified, sent only to validated public HTTPS endpoints (no loopback, link-local, private, or metadata-service addresses), and retried with bounded exponential backoff before moving to dead-letter.
Outbound events
Delivery attempts
Controlled procurement workflow: maintenance/inventory demand becomes a requisition, buyers source from organization-approved suppliers, multiple supplier quotes are captured and compared, an authorized human awards the business, and a controlled purchase order is released. This system does not determine part airworthiness, installation eligibility, approved interchangeability, supplier regulatory status, inspection approval, or return-to-service authority. Supplier approval below means "organization-approved" for procurement purposes only.
Supplier directory
Supplier detail
Qualification history (selected supplier)
Requisitions
Requisition detail
RFQ rounds (selected requisition)
RFQ detail & recipients
Quotes (selected RFQ version)
Deterministic quote comparison
Facts only — lowest quoted cash commitment and earliest stated arrival are labeled; nothing here is an automatic award or a "best supplier" recommendation.
Purchase orders
Purchase order detail
Commercial, billing, and warranty-recovery workspace. Approving, issuing, or voiding a commercial record never determines airworthiness, inspection status, or return-to-service authority -- those remain reachable only through maintenance sign / release-to-service, which stay disabled here.
Work order commercial workspace
Charge items
Authorization summary
Reconciliation (operational commercial margin estimate)
Commercial close readiness
Charge item actions
Pricing policies
Organization policies
Invoices
Invoice detail
Adjustments
Adjustment detail
Warranty claims
Warranty claim detail
Core / exchange obligations
Core obligation detail
Read-only operational summary for administrators. Extends this same administration application and reuses the liveness/readiness checks, background-job observability, and security-event classification already built elsewhere in this console — this is not a second monitoring dashboard or a separate observability system. Never displays secret values, connection strings, file paths, or raw error detail; a status of "healthy" here always means every checked dependency actually confirmed healthy, never a default assumption.
Overview
Dependencies
Background jobs
Integrations & AI assistant
Schema & build
Recent security events
Bounded counts only, grouped by severity and category — see Audit history and Account security for individual records.