OS configuration

Settings

Review host boundaries, bootstrap state, service dependencies, storage/data binding rules, and admin policy defaults.
Configuration View manifest
3 Tenant workspaces 2 active and 1 under setup or review 1 OS admins System-wide administrators with guarded bootstrap history 4 Admin credentials 1 minimum credential required per admin policy 4/4 App clients Shared auth, redirects, origins, OpenAPI, MCP, and A2A readiness

Services

Runtime rules

3 items

The OS app is the UI and proxy surface; durable state belongs behind service APIs.

No OS-owned storage Identity, tenant, role, audit, queue, cache, and secret needs belong to services and the storage plane.
ready Manifest
FastAPI services Auth, tenants, storage, and email surfaces expose service contracts instead of app internals.
ready Backend
Runtime bindings Databases, queues, caches, and secrets resolve through logical capability grants, not hard-coded resources.
high Storage plane

Useful Drill-Downs

existing tools
Manifest Auth policy Authz API Bootstrap