---
path: /egbe
surface: admin
domain: safety
auth: signed-in (admin) + scope:admin:workspace:egbe
source: apps/oshun/admin/src/app/egbe/page.tsx
status: drafted
last_walked: 'not yet walked'
---

# Safety · Egbe operator console

## Purpose

Unified operator surface for Egbe companion welfare, steward conduct, behavior
telemetry, foundry generation governance, and deployed operator surfaces. It
keeps Care, coercion, cognition, consent, provenance, and policy evidence
adjacent before an operator opens a Lilith review or takes a governed action.

## Entry points

- Direct route `/egbe`; missing sessions redirect to the unauthorized page.
- `OSHUN_ADMIN_WORKSPACE_MODEL.egbe` places the workspace in Safety and declares
  `admin:*`, `admin:studio`, or `admin:workspace:egbe` access.
- `AdminShell` sidebar entry “Egbe.”

## Layout regions

- **Workspace entry**: access/degraded context from
  `loadWorkspaceDetail('egbe')`.
- **Agent welfare**: summary metrics, per-agent signals, Ori/cognition evidence,
  and Lilith-review audit trail.
- **Steward conduct**: claim queue and selected investigation joining steward
  actions to cognition calls and policy gates.
- **Behavior telemetry**: metric panels, sample detail, per-tier cognition cost,
  and consent/training posture.
- **Foundry generation**: job queue, governing checks, generated artifacts,
  provenance bundle, and audit events.
- **Operator surfaces**: commons moderation, incarnation governance, capacity,
  takedown, policy checks, evidence, and action history.

## States

- [ ] **Accessible** — workspace detail permits the five operator panels.
- [ ] **Denied / degraded** — `WorkspaceEntryPoint` explains inaccessible or
      unavailable workspace data without rendering protected panels.
- [ ] **Flagged / under review** — welfare metrics and case audit update
      together.
- [ ] **Claim open / investigating** — selected conduct claim exposes available
      call logs and policy evidence.
- [ ] **Generation pending / complete / blocked** — job detail names every
      governing-check result and whether artifacts are inspectable.
- [ ] **Operator surface actionable / blocked** — actions respect policy checks
      and expose resulting audit state.
- [ ] **Mobile** — long evidence ids, metric grids, queues, and audit lists wrap
      without horizontal document overflow.

## Interactions

- [ ] **Open Lilith review** locally transforms a flagged welfare case to
      under-review and appends operator audit evidence.
- [ ] **Inspect conduct claim** selects the investigation and locally records an
      opened-review event.
- [ ] **Select telemetry panel** swaps the sample-detail region.
- [ ] **Inspect generation job** selects policy, artifact, provenance, and audit
      detail for the job.
- [ ] **Open operator surface action** updates the selected surface and its
      local governed state when the action is allowed.

## Data & contracts

- **Reads**: `loadWorkspaceDetail('egbe')`; default panel state is created from
  `@oshun/lilith-agent-welfare` and `@oshun/egbe-studio` domain packages.
- **Writes**: panel actions currently fold pure domain operations into local
  React state; there is no BFF mutation or persistence from these panels.
- **Auth**: the shared workspace loader determines `detail.accessible`; panels
  render only when true.
- **Telemetry**: the behavior panel carries an OTel batch/exporter description,
  but the page does not subscribe to a live telemetry stream.

## Cross-references

- IA: `libs/oshun/navigation/src/admin-ia.ts#egbe`
- Welfare package: `libs/oshun/lilith-agent-welfare/`
- Studio package: `libs/oshun/egbe-studio/`
- Browser coverage: `apps/oshun/admin/e2e/egbe-*.spec.ts`

## Open questions / known gaps

- [ ] Replace locally folded reviews/actions with scoped, conflict-aware,
      durable BFF mutations and canonical audit ids.
- [ ] Bind welfare, cognition, foundry, and telemetry panels to
      freshness-labelled reads; keep a clear degraded state for every provider.