01
Scope
Who needs the workflow, what is visible, and what stays out.
Loading this page.
Trust boundary · Concierge
Concierge intake records an owner-safe request for human review. Receipt is not acceptance, dispatch, scheduling, purchasing, or an emergency-response guarantee. Do not submit access or security credentials, payment details, private guest data, vendor wholesale pricing, or raw media identifiers. Quoalis does not store payment instruments or custody client funds here.
Module proof path
See the workflow, proof, and operating limits in one scan before reviewing the detailed path.
Inspect proof Open demoWho needs the workflow, what is visible, and what stays out.
Screenshot, proof card, or demo path that makes the claim inspectable.
What requires human review or source evidence.
Why this page is short
Some areas are intentionally represented by a narrow public boundary instead of a full feature page. That keeps sensitive operations, access rules, and unfinished marketing claims out of the buyer-facing experience.
How we evidence thisEnforced boundary
Concierge intake records an owner-safe request for human review. Receipt is not acceptance, dispatch, scheduling, purchasing, or an emergency-response guarantee. Do not submit access or security credentials, payment details, private guest data, vendor wholesale pricing, or raw media identifiers. Quoalis does not store payment instruments or custody client funds here.
CONCIERGE_BOUNDARY · apps/api/src/ironbound_api/modules/concierge/router.py:60
2 further boundary constants in this module
The staff concierge board is a read-only human triage surface. Its rows intentionally use owner-safe request language and operational posture only; loading a board never accepts, schedules, dispatches, purchases, guarantees a deadline, or exposes credentials, private guest data, payment data, vendor wholesale pricing, or raw media identifiers.
CONCIERGE_STAFF_BOARD_BOUNDARY · apps/api/src/ironbound_api/modules/concierge/router.py:67Owner decisions contain the published owner-safe prompt, options, requested amount, and decision posture only. Internal triage notes, vendor wholesale pricing, markup, credentials, private guest data, payment instruments, and raw media identifiers are excluded.
CONCIERGE_DECISION_BOUNDARY · apps/api/src/ironbound_api/modules/concierge/router.py:74Copied verbatim from apps/api/src/ironbound_api/modules/concierge/router.py and regenerated from apps/api/src/ironbound_api/modules. The API returns these same strings in its boundary fields, and a drift check fails the build if this page and the source stop agreeing.
Pilot access
The best demo is not a feature checklist. It follows a request from owner intake to manager triage, vendor packet, field evidence, reviewed closeout, and owner-safe reporting.
We respond with the recommended demo route, who should attend, and what production access would require.