01
Scope
Who needs the workflow, what is visible, and what stays out.
Loading this page.
Trust boundary · Reports
Owner reports are immutable, staff-reviewed snapshots assembled from Quoalis property operations. Published owner views exclude credentials, access/security configuration, raw media object keys, vendor wholesale costs, markup amounts, internal notes, message bodies, guest details, and accounting export internals.
Module proof path
See the workflow, proof, and operating limits in one scan before reviewing the detailed path.
Inspect proof Open demoWho needs the workflow, what is visible, and what stays out.
Screenshot, proof card, or demo path that makes the claim inspectable.
What requires human review or source evidence.
Why this page is short
Some areas are intentionally represented by a narrow public boundary instead of a full feature page. That keeps sensitive operations, access rules, and unfinished marketing claims out of the buyer-facing experience.
How we evidence thisEnforced boundary
Owner reports are immutable, staff-reviewed snapshots assembled from Quoalis property operations. Published owner views exclude credentials, access/security configuration, raw media object keys, vendor wholesale costs, markup amounts, internal notes, message bodies, guest details, and accounting export internals.
BOUNDARY · apps/api/src/ironbound_api/modules/reports/router.py:241
3 further boundary constants in this module
A report artifact is stored in a private object store under an internal key that is never returned in any response. Every download is redeemed against a single-use intent that is stamped by the database, gated on quarantine state, and refused if the stored bytes do not match the checksum recorded when they were approved. This module renders no file, sends nothing externally, and mints no public or presigned URL.
ARTIFACT_INTEGRITY_BOUNDARY · apps/api/src/ironbound_api/modules/reports/artifact_integrity.py:64Profitability previews remain staff-only economics workspaces. Owner narratives may reference reviewed spend posture, readiness, and source gaps after review, but they must not expose internal labor rates, vendor wholesale costs, markup, raw GPS, security/access details, tax treatment, valuation conclusions, or investment advice.
PROFITABILITY_PREVIEW_BOUNDARY · apps/api/src/ironbound_api/modules/reports/router.py:778Property-manager operating digest is an internal, read-only portfolio projection. It may summarize owner-safe work and vendor workload, but it excludes owner contact data, guest identities, vendor pricing/markup, raw media object keys, credentials, access/security configuration, message bodies, provider tokens, and tax/legal/appraisal claims.
OPERATING_DIGEST_BOUNDARY · apps/api/src/ironbound_api/modules/reports/router.py:784Copied verbatim from apps/api/src/ironbound_api/modules/reports/router.py and regenerated from apps/api/src/ironbound_api/modules. The API returns these same strings in its boundary fields, and a drift check fails the build if this page and the source stop agreeing.
Pilot access
The best demo is not a feature checklist. It follows a request from owner intake to manager triage, vendor packet, field evidence, reviewed closeout, and owner-safe reporting.
We respond with the recommended demo route, who should attend, and what production access would require.