Administrator guide
ADMINISTRATOR The administrator is the sole owner of fleet structure, user accounts, and UCS Foundation. There is one administrator account per deployment.Restricted section
The pages under Internal — restricted in the sidebar are gated behind Cloudflare Access. Only the administrator email approved on the policy can read them. They contain:
- Version development history — every release, what shipped, what was deferred
- AI architecture — Workers AI, Claude, Gemini, Perplexity, Kimi; routing rules; budget guard
- Information flows — Run 1 / Run 2 pipelines, RAG, KB heal, cascade
- Database & migrations — D1 schema, RAG-corpus, R2, Vectorize
- Worker bindings & secrets
- Deploy procedure
- Incident response
Restricted material
Do not paste content from those pages into in-app messenger threads, public Slack, or external tickets. They contain D1 IDs, account IDs, R2 bucket names, and the deploy procedure.
Capabilities map
| Area | Capability |
|---|---|
| Users | Create, disable, change role, reset password (PBKDF2-SHA256 100K + salt) |
| Vessels | Onboard new vessel, edit particulars, assign to superintendent, delete (preserves RAG) |
| UCS Foundation | Propose codes, activate version, run cascade preview / apply |
| Master List | Authoritative — every component code in every vessel CL must come from here |
| Hierarchy Atlas | L1 / L2 / L3 grouping that drives navigation, missing-component picker, breadcrumbs |
| Drawings registry | Mutate the global drawings registry |
| Backups & restore | R2 daily backups (03:00 UTC), restore-from-snapshot |
| Data integrity ops | KB orphan heal, RAG mandatory-class backfill, provenance backfill, quarantine pick |
Where to go next — first-time setup
- Managing users — set up superintendents and the supervisor
- Vessel onboarding — natural-flow sequence (particulars → GA → sister detection → CL skeleton wizard)
- UCS Master List & versioning
- Cascade preview & apply — when a new Master version goes active
Where to go next — daily ops
- KB orphan heal — admin-triggered, Jaccard ≥ 0.72
- Backups & restore
- Deploy procedure (restricted)