Governance · Leeu Workspace
Vault Metadata
Vault areas and metadata labels only. Raw secret/vault content is never displayed in this UI.
LEEU Mode: DEV_OBSERVE_ONLY8 metadata entries
LEEU Mode DEV_OBSERVE_ONLY. Development is not constrained by live LEEU Execution Governor authority. LEEU Execution Governor controls are being built, simulated, tested, and audited in sandbox. Production external effects remain gated.
Vault metadata only. Raw secret/vault content is never displayed in this UI. No vault access is wired in this project.
LLM Orchestrator Selector
Frontend-only routing intent — no live provider calls
Mock selector — no provider callOrchestrator: Local / Mock
Local / Mock. Local mock lane. Deterministic, offline. No external effects.
liveApiEnabled: false · boundary: none · next: Use for UI/workflow simulation
Vault Metadata
Frontend mock · external effects gated
| Vault area | Metadata label | Sensitivity | Access status | Raw visible | Linked policy | Verification | Next action |
|---|---|---|---|---|---|---|---|
| AIOS_MEMORY | Control-plane signing keys (metadata only) | secret_metadata_only | no_access_wired | false · raw_content_hidden | policy_dev_console | mock_only | Wire only via LEEU Execution Governor admission |
| Supabase (not enabled) | Service role + publishable key slots | restricted | no_access_wired | false · raw_content_hidden | — | needs_registry | Founder enables Supabase before any wiring |
| LLM provider credentials | OpenAI / Google / Anthropic credential slots | restricted | no_access_wired | false · raw_content_hidden | — | needs_registry | Deferred — no provider lane is connected |
| Trade Admiral (FinTech) | Broker/paper-trade credential slots | secret_metadata_only | no_access_wired | false · raw_content_hidden | policy_trade_admiral | registry_backed | Governed by the LEEU Execution Governor; paper-only until live gate |
| Webhook secrets | External webhook signing secrets | confidential | no_access_wired | false · raw_content_hidden | — | mock_only | Define webhook surface before provisioning |
| Audit ledger storage | Audit retention policy bindings (metadata) | internal | metadata_only | false · raw_content_hidden | policy_dev_console | mock_only | Promote to real storage on Supabase enable |
| TS360 / TotalSite360 overlay | Brand/overlay configuration metadata | internal | metadata_only | false · raw_content_hidden | — | needs_registry | Confirm overlay scope, do not treat as tenant |
| AskAllocate (legacy) | Legacy credential references | unknown | no_access_wired | false · raw_content_hidden | — | stale | Do not reactivate |
Hashley summary
What
AIOS_MEMORY · Control-plane signing keys (metadata only)
Why it matters
Sensitivity secret_metadata_only. Access no_access_wired. Raw content visible: false.
Current mode
DEV_OBSERVE_ONLY
Lane
Local / Mock
Local/Mock or Live
local/mock
Boundary
production_gated
Next action
Wire only via LEEU Execution Governor admission
Actions are local UI only. No external effects. No provider calls.
External-effect boundary
Channels, proposals, and manifests do not grant execution authority.
External-effect work remains proposal-only until LEEU admission. Production gate is not active.
DEV_OBSERVE_ONLY · vault_metadata_only · raw_content_hidden · external_effect_gated