Implemented and verified.
21 implemented capabilitiesResponsive remote-inspection desk · Paid-entitlement state separated from application state · No credential or token-bearing URL input · Non-secret entitlement references · Ephemeral token-handle model · Exact Auth2 origin equality · One-field status-204 schema validation · Lookalike-origin rejection · HTTP shell and coverage evidence separation · Immutable viewer attempts · Human observations without provider metadata · No imagery or screenshot persistence · Inspector-reviewer separation of duties · Entitlement expiry recovery · Immutable rework · Idempotent commands · Optimistic concurrency · Append-only audit events · Transactional outbox · Atomic restart recovery · Credential-free fixture mode
Browser application
A responsive operations console backed by the included JSON API.
Durable domain
Aggregate snapshots, audit events, idempotency records, evidence, and outbox entries are committed together.
Fixture adapter
A credential-safe provider boundary aligned to named Mappls endpoint contracts.
Executable tests
10 tests covering lifecycle, HTTP, replay, conflicts, domain recovery, and restart behavior.
Architecture notes
Trust boundaries, aggregate invariants, adapter ownership, evidence lineage, and recovery design.
Deployment guide
Database, identity, secrets, outbox, privacy, observability, migration, and rollback work.