Context. surface studio · domain isis · route /studio/isis/multi-gpu-orchestration · auth signed-in + studio entitlement (AAA-gated — multi-gpu-orchestration is in AAA_ONLY_STUDIO_ROUTES) · source apps/oshun/web/src/app/studio/isis/multi-gpu-orchestration/page.tsx
Last walked. 2026-05-29 automated runtime walk (Playwright headless) — render, /v1 data (2xx), console/page-errors, expected content, screenshot verified; live screen-reader, touch, offline, and telemetry-delivery checks pending a manual AT pass. Evidence: WALKTHROUGH/results/runtime-sweep-2026-05-29.md; body re-derived 2026-06-03 from current source (lane-console architecture)
Purpose#
Admin lane console over the @isis/entitlements tier engine. Because the
multi-GPU orchestration surface is itself a tier-gated generation surface, the
operator resolves an entitlement-tag set against a chosen surface and the engine
returns the access verdict (allow/deny with reason), the resolved tier, and the
allowlist. Reads and checks via /v1/admin/isis/multi-gpu-orchestration;
admin-scoped and fail-closed.
Entry points#
- Sibling quick-action from
/studio/isis/gpu-worker-architecture - Studio index (
/studio) - Direct URL / bookmark (AAA entitlement required)
Layout regions#
page.tsx mounts <ShellLayout active="studio"> (no breadcrumb panel) and three
panels: the workspace, the Route Map, and sibling quick-actions.
- Header: shell header
- Workspace panel (
data-isis-multi-gpu-orchestration-workspace):<h1>(WorkspaceHeading) "Isis Multi-GPU Orchestration Workspace"- Summary paragraph (
data-isis-multi-gpu-orchestration-summary) - Allowlist (
data-isis-mgo-allowlist,data-isis-mgo-anchor) - Access check form (
data-isis-mgo-check-form) + result (data-isis-mgo-result) withdata-isis-mgo-verdict,data-isis-mgo-tier,data-isis-mgo-deny-action
- Route Map panel (
data-isis-multi-gpu-orchestration-route-map):<h2>Route Map</h2>over the route map (5 entries) - Sibling quick-actions panel:
/studio/isis/gpu-worker-architecture,/studio
States#
- Loading —
data-isis-mgo-loading - Unauthorized — 401/403 admin-scope fail-closed;
data-isis-mgo-unauthorized - Error — non-OK / malformed;
data-isis-mgo-error - Ready (form) — allowlist + check form render
- Result —
data-isis-mgo-result(allow/deny verdict); check failure →data-isis-mgo-check-error
Interactions#
Access check form (data-isis-mgo-check-form)#
- Entitlement tags (
data-isis-mgo-field-tags, input,aria-label="entitlement tags") - Surface (
data-isis-mgo-field-surface,<select>) - Check access (
data-isis-mgo-check-submit, submit) —POST /v1/admin/isis/multi-gpu-orchestration/check
Route Map#
- Route-map articles ×5
Sibling quick-actions#
- Open Isis GPU Worker Architecture workspace →
/studio/isis/gpu-worker-architecture - Back to Studio workspace index →
/studio
Data & contracts#
- Reads:
GET /v1/admin/isis/multi-gpu-orchestration(tier allowlist / surfaces) - Writes:
POST /v1/admin/isis/multi-gpu-orchestration/check(resolve an access verdict) - Realtime: none
- Caching: client fetch on mount,
cache: 'no-store',buildBffAuthHeaders() - Auth/role check: admin-scoped, fail-closed (401/403); route AAA-gated
(
multi-gpu-orchestrationinAAA_ONLY_STUDIO_ROUTES) - Component sources:
apps/oshun/web/src/components/studio/StudioIsisMultiGPUOrchestrationWorkspace.tsxapps/oshun/web/src/components/studio/StudioIsisMultiGPUOrchestrationRouteMap.ts
Cross-references#
- Studio overview:
../../studio-overview.md - AAA gating:
libs/isis/entitlements/src/studio-boundary.ts - Sibling routes:
Open questions / known gaps#
- No breadcrumb on this route — navigation via sibling quick-actions
- Route-map sub-paths are declared but not yet implemented as separate pages