01
Scope
Who needs the workflow, what is visible, and what stays out.
Loading this page.
Trust boundary · Collection pages
Member property capabilities are the union of currently eligible assignments across this member’s contexts in this workspace; properties sort by name and UUID. This aggregate display does not grant simultaneous selected-context command authority. Nested membership metadata above 10,000 source rows is refused rather than partial.
Module proof path
See the workflow, proof, and operating limits in one scan before reviewing the detailed path.
Inspect proof Open demoWho needs the workflow, what is visible, and what stays out.
Screenshot, proof card, or demo path that makes the claim inspectable.
What requires human review or source evidence.
Why this page is short
Some areas are intentionally represented by a narrow public boundary instead of a full feature page. That keeps sensitive operations, access rules, and unfinished marketing claims out of the buyer-facing experience.
How we evidence thisEnforced boundary
Member property capabilities are the union of currently eligible assignments across this member’s contexts in this workspace; properties sort by name and UUID. This aggregate display does not grant simultaneous selected-context command authority. Nested membership metadata above 10,000 source rows is refused rather than partial.
MEMBER_PROJECTION_BOUNDARY · apps/api/src/ironbound_api/modules/collection_pages/router.py:44
2 further boundary constants in this module
Each admitted page uses its own coherent read snapshot, ordered by immutable created instant and UUID. Matched count describes the same server filters, not a different page or global workspace. Concurrent changes may alter later pages; this is not a frozen snapshot.
PAGE_BOUNDARY · apps/api/src/ironbound_api/modules/collection_pages/router.py:38Complete bounded matching source selected in one export-only read snapshot. Current authority is re-evaluated inside the snapshot. No partial page is labeled complete. Authority withdrawal after an admitted snapshot can race with a read already in flight.
EXPORT_BOUNDARY · apps/api/src/ironbound_api/modules/collection_pages/router.py:50Copied verbatim from apps/api/src/ironbound_api/modules/collection_pages/router.py and regenerated from apps/api/src/ironbound_api/modules. The API returns these same strings in its boundary fields, and a drift check fails the build if this page and the source stop agreeing.
Pilot access
The best demo is not a feature checklist. It follows a request from owner intake to manager triage, vendor packet, field evidence, reviewed closeout, and owner-safe reporting.
We respond with the recommended demo route, who should attend, and what production access would require.