Admin Console

Source Governance

Role-gated console shell for source add/update/disable workflows, credential binding, and event audit review. Backend remains authoritative for RBAC/ABAC decisions.

X Account Collection Setup (Initial Backfill + Ongoing Monitoring)
Admin picks poll interval

The polling interval is stored on the source (poll mode). The immediate buttons queue ingestion runs so you can bootstrap and verify collection without waiting for the next scheduled cycle.

Calls /api/admin/sources to evidence-api
Bind source credentials (exception/rotation workflow)
Approve / disable / inspect source events

Admin Task Guide

Quick instructions for each common task and where to perform it on this page.

Start X account collection
Section: X Account Collection Setup
  1. Enter the trusted X account handle and choose the polling interval (for example, every 10 minutes).
  2. Set the initial backfill date/time range to retrieve earlier posts.
  3. Submit the form to create the source and queue the first collection run.
Bind or rotate source credentials
Section: Credential Binding
  1. Use Source ID from the source registry table.
  2. Choose auth mode and secret reference.
  3. Enable dual-control header when using username/password mode.
Review source status and events
Section: Source Registry Snapshot + Row Actions
  1. Check verification and credential binding status in the table.
  2. Use row actions to load events, approve, or disable a source.
  3. Use the detailed source action form when you need a custom disable reason.
Run an immediate collection check
Section: X Account Collection Setup
  1. Use the manual trigger button after a source has been created.
  2. This queues an ingestion trigger immediately without waiting for the next poll interval.
  3. Use it to confirm connectivity or collect urgent new posts.

High-risk workflow controls

Dual control required: `username_password` source credential binding.

Audit events must be append-only for source-governance changes.

UI affordances must not imply authorization; backend OPA policy is final.

Data source: live evidence-api (dev bearer).

Source registry snapshot

Prototype table modeled after GET /v1/admin/sources and source event workflows.

SourceStatusTriggerCredential BindingActions