Case Cockpit
No active client selected

Case cockpit

Select a saved client from management or start a new onboarding flow. Cloak Harbor no longer loads another persisted client by default.

No active client context

Select or create a real customer case

Cloak Harbor does not load an arbitrary person by default. Select a saved client or start onboarding before reviewing evidence, OSINT results, actions, reports, or schedules.

Production readiness

Pilot-ready with visible setup gaps

Real runtime, client, case, and Vercel ecosystem state. No secrets are exposed and no external action is triggered by this check.

83
attention

Persistent case storage

Client, evidence, Kanban, report, and intent state can persist.

ready
Evidence
  • vercel_postgres
  • Vercel Postgres/Neon persistence is configured for production state, audit ledgers, and protected operator workflows.
Review backend

Selected client certainty

A saved client exists, but this route is not scoped to one yet.

attention
Evidence
  • saved clients: 1
  • selected client: none
Select client

Case work records

Select a client before judging case record depth.

attention
Evidence
  • 0 findings
  • 0 evidence records
  • 0 tasks
  • 0 action packets
Choose client

Protected action boundary

Docs, Sheets, Files, BrowserOps, Sandbox, and workflow handoffs use server-side PLATPHORM_API_KEY.

ready
Evidence
  • docs: live
  • sheets: live
  • files: live
  • browserops: live
  • sandbox: live
  • webhooklab: live
  • trace: live
Open integrations

Vercel Connect OAuth

Delegated provider authorization can start without browser token exposure.

ready
Evidence
  • connector: github/cloak-apricot-castle
  • callback: https://cloak.platphormnews.com/cloak
  • auth: vercel_oidc
Authorize provider
Show full readiness matrix

Live operator workbench

persistence degraded

Use this panel to exercise the real loop: initialize persistence, record a checkpoint, draft and approve an action packet, review the report, and trigger server-to-server Docs, Sheets, Files, BrowserOps, and Sandbox handoffs. Downstream calls use the server-side operator credential from Vercel or local env; this browser never receives or stores secrets.

Server-side protected actions

Operator actions below call a public facade that dispatches to allowlisted server routes. If server authorization or Postgres is unavailable, the result is shown as blocked/degraded instead of faking success.

Select or create an authorized client below before running client-specific workloads. Backend setup and infrastructure planning remain available without a selected client. Open management

Active client

Cockpit actions run against the selected client. Selection is explicit so one case never appears by accident.

No client selected

Client-specific findings, evidence, cadence, and protected intents stay hidden until the operator selects an explicit client scope.

Cloak Harbor Personal Exposure DefenseProduction pilotHuman approval requiredPassive OSINT onlyNo external sendingResponsible-use policy