Sign in
You are currently signed out, please sign in for access to Broa.
You are currently signed out, please sign in for access to Broa.
Loading the queue…
| Received | Imported | Channel | Path | From | Subject | Message | State | Age |
|---|
How your correspondence is flowing, stage by stage. Each
card shows the worst state of its parts and then lists them, so the colour
is never the whole story. Checked every 15 seconds — last at
—.
Probed —
Loads .eml files through the same admission pipeline
as any other message (ING-FIL-001). Use it to bring existing
correspondence in — an archive, a client's forwarded mail — rather than to relay
something that has just arrived. For that, use
Compose.
This decides whether the platform may ever answer it, so it is asked before the files rather than after.
There is no option here for live mail, and
that is deliberate. An imported message is admitted with a non-live origin
(ING-FIL-003) and the run token minted for it carries no capability
to send (ING-FIL-004) — so importing a customer's old question
cannot result in them being emailed about it weeks later. The service refuses
origin=live outright; this list is not what enforces it.
No files chosen.
| File | Outcome | Subject | Why |
|---|
This enters the same admission pipeline as a message that
arrived by mail or came in on a file import (ING-SUB-001). Nothing
downstream can tell it apart, and nothing here is trusted more than a message
relayed by a tenant's own backend.
Submitting into the tenant you are working
in. There is no tenant field here and typing one would have no effect
(ING-SUB-003).
Submitting…
What this tenant's intake accepts. Enforced by
ingestion-svc before a request is buffered or parsed
(ING-LIM-002), and owned here as configuration
(CFG-COV-016) so a change is versioned, revertible and audited.
A tenant may set a limit below the platform ceiling and
never above it (ING-LIM-003). A value of zero is refused: stopping
intake is a tenant lifecycle action, not a limit.
Intake limits could not be read.
| Limit | In force | Platform ceiling | Source |
|---|
Not reported by this deployment.
CON-ADM-014 requires the intake-path and publication flags shown
here, and ingestion-svc exposes no endpoint that carries them. This
panel shows nothing rather than an all-clear it cannot support: an operator
looking at a stalled queue would otherwise read "no problems" from a page that
never asked.
Of the five intake paths, two accept anything today — file import and the submission endpoint behind Compose. Publication to the event bus is not wired, so nothing downstream is notified of an admitted message.
| Recorded | State | Outcome | Kind of question | Message | Definition | Spent |
|---|
What the assistant can read for this tenant: whether its indexes are current, the products and documents it holds down to the passages it reads, and what a question would retrieve. Read-only.
The quantity discounts Broa may state in a reply. Every price in a reply is computed by code from these rules and the catalog list price; an email asking for more than they give is held for a Tenant Admin to decide. Changes take effect only when published.
Prices one product with the rules as they are in the editor now, saved or not, using the same calculator the pipeline runs. Nothing is saved or sent.
Replies Broa has blocked because the customer asked for more discount than the pricing rules give. Each reply already quotes what the rules allow. Grant a larger discount and Broa writes a new reply at that discount; decline and the reply stays as it is. Every decision is recorded and audited.
Who this tenant corresponds with — accounts and prospects, and the
people, systems and agents acting for them. An index, not a customer store
(PTY-MOD-007a): identity and the association graph only. Orders,
invoices and prices stay in the tenant's own system, reached live through
external_ref.
Loading parties…
| Name | Kind | Relationship | External ref | Since |
|---|
A party added here is created confirmed: you asserted it, so it does not appear in the unconfirmed queue above. Parties may also reach this list by other routes — this console is told what exists, not how it got here.
Tenants are platform-plane (CON-IDN-002). Everything inside a tenant is tenant-plane. There is no identity directory — members are added by exact issuer and subject, because a searchable one would disclose which addresses exist in other tenants (CON-IDN-004).
| Name | Status |
|---|
One action, not four — IDN-TEN-005 makes the
tenant, its default workspace, the first membership and the first admin role
atomic.
| Identity | Status | Roles |
|---|
Adding a member grants no role — membership and role assignment are separate acts with different blast radii (CON-IDN-005). Disable suspends and is reversible; Remove from tenant cascades (CON-IDN-007).
Which mail is your own. Broa records a message from one of these senders on its thread and never drafts a reply to it, so it does not answer your own staff. A website enquiry relayed from one of your form addresses is the opposite: it is still answered, addressed to the customer the form names. Nothing here is guessed — only what you list counts. Changes take effect only when published.
The domains your company mails from. A domain also covers
its subdomains, so example.com covers
mail.example.com — there is no wildcard to write.
Matched against the sender the mailbox recorded, never against a reply-to
address or a signature. Adding one is an ordinary change; removing one lets
Broa draft replies to that mail again and is recorded as sensitive.
Single mailboxes that are yours although their domain is not — the outside address a salesperson still uses, a contractor on their own domain. Whole addresses only. Removing one is a sensitive change for the same reason.
The addresses your website’s enquiry forms send from. Mail from these is not treated as your own: Broa reads the customer out of the form and replies to them. A relay must be one of your declared senders first — its domain listed above, or the whole address listed as yours. Where a form names nobody, the message is held for a person to look at rather than answered. Removing one is a sensitive change.
This page is a read-only history view. Settings are changed on Platform › Settings (Broa's platform administrators): one setting at a time, with the change shown before it is saved and everything else kept in force.
A revision is immutable and publication is a separate act
(CFG-VER-001, CFG-VER-005). Every row below says which state
it is in.
Loading configuration…
| Domain | Effective value | Came from | Revision |
|---|
"Came from" is provenance (CFG-RES-002) —
which scope in the chain supplied the value. It is how you answer why a
workspace behaves differently from its tenant.
| Name | Domain | Scope |
|---|
| Revision | State | Comment | Author | Created |
|---|
| Version | State | Comment | Actor | Published |
|---|
A set is the unit of publication and spans objects
(CFG-VER-006). Rollback produces a new published set
(CFG-VER-007), and superseded sets are hidden here, never
deleted — they are what a rollback restores, and what says which
configuration produced a past response (CFG-VER-003,
CFG-RES-004).
Every client, where each one is in Get started, and what is stuck — so a client who stopped halfway is noticed before they give up. Every step is computed, never ticked. A step we cannot see is shown as ?, never as “not yet”. Clicking a client offers borrowed access and nothing else.
Loading clients…
| Client | Get startedR1–R7: ✓ done · · not yet · → blocked · ? cannot see · – set aside | Last mail | Spend ceilingBroa’s model cost, per calendar month | Trial | Stuck | Paused, exported, removed§3h — the way out |
|---|
One action creates the client: their tenant, the first administrator’s account, the starter pack for their business, their spend ceiling, and a fallback forwarding address for their mail. If anything stops halfway, call again — the same attempt finishes what is missing and never makes a second client.
What people at each company asked Broa for help with. Reply, and set where it stands; the company sees each reply as from Broa.
How long Broa takes with a message, from the mailbox to a reply: each part of the way, and each step inside the pipeline, with its model and cost. Read only.
Every setting in one place: where its value comes from, its history, and a safe way to change one at a time. Every change is recorded with its reason and can be restored.
How much Broa may write, read, spend and take for one email, by default for every company. Every change is recorded with its reason.
Every time Broa staff open a company, who, why, for how long and whether they could change anything. Each one was emailed to every platform administrator and is visible to the company. Mark each one reviewed once you have looked at it.
Tell companies about planned work, a known problem or news. Choose who sees it and when it expires; edit or withdraw it while it shows. Every change is recorded.
Mailboxes used to send approved replies, and whether Broa is reading them.
Loading tenant mailboxes…
| Action |
|---|
Each company's ERP: whether Broa can read it, when it last did, the last thing that went wrong, and the request limits in force ("(own)" where the company chose its own). A company connects or replaces its key, and changes its limits, on Company settings → Connections; with borrowed access you can help there.
How much each client is using Broa, per ISO week (Monday to Sunday, UTC). Counts only: no message, no customer, no person’s name — people are counted per role. Seeing what is behind a number means borrowing access to that client, which is recorded and visible to them.
Loading usage…
| Client | Approvedbilling unit | Messages | Runs | Edited before approval | Closed without reply | Knowledge changeditems moved, not work done | ERP readscalls to the client's ERP | Active peopleon the busiest day | Model spendthis week | Widget spendmonth to date | Trendapproved, per week | Completeness |
|---|
Which parts of Broa each client opened this week. A screen opened is a screen opened — not time spent, and not work done. None of these figures is a billing input: the billing unit is Approved, in the table above. People are counted per role and never named.
| Client | Screens openedopens, not time | Different screenshow broadly | Busiest screensopens per screen | Actions takenof the seven | Different actions | Which actionstimes each | Per rolecounts, never a person |
|---|
Oldest week on the left. * the figure can still change (the week is open, recently closed, or a figure is not measured); ≥ some usage is known to be missing; not reported means this metering-svc does not send that figure at all, which is not the same as zero.
This is a screen and not an alert: nothing here is emailed and nothing is alerted on. It says who and never why — a holiday, a closed showroom and a client who gave up are the same number here — so the only move offered is the one every client offers: asking for borrowed access, with a justification the client can see.
Consumption for one company. Broa's internal provider cost
and margin are not shown here and are not sent to this page
(CON-MTR-003).
Loading usage…
A budget does not stop
correspondence. If quota state is unavailable the platform keeps
processing messages (MTR-QTA-004) — a budget is a spend
control, not a kill switch, and treating it as one is how a tenant's
customers get ignored.
Budgets are not persisted yet: quota configuration
(MTR-QTA-002) has no store behind it, so this control
demonstrates the consequence text and saves nothing.
The published metering vocabulary
(MTR-COV-023): what can be measured, in what unit, and which
dimensions every event must carry. A meter absent from this list cannot be
recorded.
| Meter | Unit | Aggregation | Components | Required dimensions |
|---|
Every decision and action, including reads
(AUD-COV-001, AUD-COV-002). Reading this page is
itself an audited access.
What this platform can record, and which types are
critical — AUD-CAP-004 forbids the action from completing
until a critical event is durably persisted.
Loading audit records…
| Correlation |
|---|