Scope
Who needs the workflow, what is visible, and what stays out.
Trust boundary · Media
Append-only review annotations bind original and displayed normalized bytes to the exact typed proof version. JPEG/PNG pins and regions use unrotated normalized image coordinates; PDF marks bind the exact rotated CropBox page and renderer revision. Private comments never grant owner visibility. Replacement retains prior marks only on prior evidence; no marks are copied.
Module proof path
See the workflow, proof, and operating limits in one scan before reviewing the detailed path.
Inspect proof Open demoWho needs the workflow, what is visible, and what stays out.
Screenshot, proof card, or demo path that makes the claim inspectable.
What requires human review or source evidence.
Why this page is short
Some areas are intentionally represented by a narrow public boundary instead of a full feature page. That keeps sensitive operations, access rules, and unfinished marketing claims out of the buyer-facing experience.
How we evidence thisEnforced boundary
Append-only review annotations bind original and displayed normalized bytes to the exact typed proof version. JPEG/PNG pins and regions use unrotated normalized image coordinates; PDF marks bind the exact rotated CropBox page and renderer revision. Private comments never grant owner visibility. Replacement retains prior marks only on prior evidence; no marks are copied.
ANNOTATION_BOUNDARY · apps/api/src/ironbound_api/modules/media/router.py:82
1 further boundary constant in this module
This is a distance check between the GPS coordinate a camera wrote into a photograph and the single coordinate a person typed for the property. It claims only that the two points are, or are not, close enough to be consistent, and how good the reference point it compared against was. It is not proof that a person was present, that work was performed, that a photograph is of the property, or that a photograph is authentic; EXIF is writable by anyone holding the file. It does not test a parcel boundary -- no boundary is stored -- and it never geocodes, looks up an address, or makes an outbound call. A verdict of 'outside_declared_property' means the two coordinates disagree by more than any plausible GPS error, which is a reason for a person to ask a question, not a finding of misconduct.
MEDIA_GEO_VERIFICATION_BOUNDARY · apps/api/src/ironbound_api/modules/media/geo_verification.py:31Copied verbatim from apps/api/src/ironbound_api/modules/media/router.py and regenerated from apps/api/src/ironbound_api/modules. The API returns these same strings in its boundary fields, and a drift check fails the build if this page and the source stop agreeing.
Pilot access
The best demo is not a feature checklist. It follows a request from owner intake to manager triage, vendor packet, field evidence, reviewed closeout, and owner-safe reporting.
We respond with the recommended demo route, who should attend, and what production access would require.