Internal admin-ops · access is role-restricted at deployment

Admin · Journeys

Journey Control Center

Orchestration, recommendations, partner legs and exposure — across the platform. Updated just now.

Live data unavailable right now — showing a sample model.

128Plans
86Ready groups
14Pending
2Dead-lettered

Orchestration outbox & DLQ

EventStatusAttemptsAge
journey.pending action createdpublished1/52m
journey.pending action expiredpending0/540s
journey.pending action createdfailed3/511m
journey.pending action createddead letter5/51h

Pending coordinator

  • awaiting restaurant confirmationkeep_pending · in 3h
  • schedule incompatibleask_user · in 1h

Recommendation snapshots

  • accommodation2 organic · 1 sponsored (separated) · 5m
  • transport3 organic · 0 sponsored (separated) · 12m

Partner assertions

  • tickets_partner partner_assertedpartner-owned · partner pays · 28m left · no PII

Checkout groups

  • oferon · 3 legsready · oferon pays
  • partner_api · 1 legsdraft · partner pays

Public exposure gate

Not exposed (default-deny)

  • Feature flag
  • Golden journeys
  • Real journey evidence (0)
  • Vertical ready

Buyer-facing state: not available in your area

Journey templates & mode policy

TemplateStatusModesReqs / MVO
City break & eventsactiveplan5 / 2
Family & pet-friendly tripdraftplan4 / 2

Replan history

  • replan: swap stayplan_weekend_stay · v2 · 8m
  • replan: add transferplan_city_break · v2 · 1h

AURON action audit

  • outbox requeue A3outbox:ob_4 · admin · 4m
  • template pause A4template:aile_ve_evcil_hayvanli_tatil · admin · 2h

Partner / API health

1Assertions
1Live TTL
0Expired TTL
  • partner api1

Golden journeys & RLS checks

Golden journeys 50/50

  • tenant isolation (app.tenant_id restrictive RLS)
  • append-only snapshots/assertions/audit triggers
  • global config tables default-deny RLS

Governance actions

Every action is append-only audited with its AURON level. Admins emit compensating actions — prior snapshots are never mutated.

Actions

Actions are scoped to one plan and audited server-side. Replan never mutates a confirmed or paid item — it requests cancellation through the owning engine.