Personal Exposure Defense Cockpit
OverviewCockpitKanbanCalendarEvidenceReportJitsiTwilioMailCloudflareAWSWeb ScanSCCTraceSettings

Integration map

8-state lifecycle matrix for all external services and PlatPhorm systems.

Local previewOpen cockpit
Synthetic principal scenario. All identifiers are reserved or fictional. No real people are scraped or enriched.
Authorized scopeHuman approval requiredNo live scrapingNo external sendingNo real personal data

One authorized client, one real exposure-defense loop, zero fake actions.

Integration truth is visible without implying live external action.

Principal

Jordan Hale

synthetic-principal-001

Findings

12

case-state fallback

StealthScore

54 -> 78

rubric estimate

External actions

0

human approval required

Loop proof

Evidence that this screen supports the Jordan Hale defense loop.

Jitsi
Twilio
Cloudflare
AWS
MCP
Trace

State declaration

No surface claims a live action that is not wired.

Local previewConfiguredNeeds envFutureProtected action

Any outside-world touch remains protected, gated, or dry-run. Scaffolded controls can acknowledge intent locally but do not send, provision, upload, scan, call, publish, or mutate external systems.

Capability proof

Route-level proof that this screen stays inside the Jordan Hale loop.

operate

Integration map

Local preview

A lifecycle matrix that explains which services are configured, missing, scaffolded, dry-run, protected, degraded, unavailable, or future.

Real today

The integration tiles render deterministic lifecycle states and provider/environment labels.

Scaffolded

Live health checks, env mutation, provider calls, and cross-site workflows require protected backend integration.

8-state lifecycle
Provider labels
No integration success is faked
Missing env remains labeled

externalActionTaken: false. No external action is triggered from this route.

operate

Service provisioning center

UI scaffold

A service setup center that shows what infrastructure the case needs and what is blocked before real provisioning.

Real today

The center renders service cards with owners, due days, related findings, protected flags, and next actions.

Scaffolded

Provider calls, resource creation, queue workers, partner completion, and real service activation are not executed in this UI phase.

12 service categories
Owners
No resource has been provisioned
No provider key is exposed

externalActionTaken: false. No external action is triggered from this route.

Support mode

2

Capabilities

2

Docker

2

Vercel

Postgres can persist support and audit facts locally or on Vercel. Deployments without DATABASE_URL stay public-safe and degraded.

integration

External service actions

UI scaffold
Local Postgres: degradedVercel: degraded

Jitsi, Twilio, SendGrid, Cloudflare, AWS, SCC, scan, and submit tools all return implemented:false.

Every external action remains scaffolded/protected until intentionally wired.

externalActionTaken: false

integration

Provider provisioning

Protected action
Local Postgres: degradedVercel: degraded

Cloudflare, AWS, SCC, and mail controls produce scaffold/protected responses only.

No resource has been provisioned.

externalActionTaken: false

api

MCP capability introspection

Connected
Local Postgres: supportedVercel: supported

get_demo_capabilities_ui and cloakharbor://demo/capabilities expose the catalog and runtime mode.

MCP still reports fixture/degraded runtime when Postgres is absent.

externalActionTaken: false

safety

Responsible-use gates

Connected
Local Postgres: supportedVercel: supported

Sensitive UI controls and MCP tools state human approval and externalActionTaken:false.

Safety gates remain active in fixture mode.

externalActionTaken: false

Integration lifecycle

8-state external-service matrix.

Vercel AI Gateway

AI

Dry-run

Drafts action packets and report language.

Drafts/dry-runs available; no external change.

VercelAI_GATEWAY_API_KEY

SendGrid

Communications

UI scaffold

Transactional email for notices and client updates.

Interface built; backend wiring pending.

TwilioSENDGRID_API_KEY

Twilio

Communications

UI scaffold

SMS / voice notifications and verification.

Interface built; backend wiring pending.

TwilioTWILIO_AUTH_TOKEN

Jitsi

Communications

UI scaffold

Secure operator/client meetings.

Interface built; backend wiring pending.

8x8JITSI_APP_ID

Cloudflare

Network

Needs env

WAF, allowlisting and edge protection.

Set the environment variable to enable.

CloudflareCLOUDFLARE_API_TOKEN

AWS S3

Storage

UI scaffold

Evidence object storage with retention.

Interface built; backend wiring pending.

AWSAWS_ACCESS_KEY_ID

Vercel Blob

Storage

Needs env

Demo-grade evidence + export storage.

Set the environment variable to enable.

VercelBLOB_READ_WRITE_TOKEN

Neon Postgres

Data

Future

Durable system of record for cases and audit log.

Planned on the roadmap.

NeonDATABASE_URL

PlatPhorm MCP

Platform

Dry-run

Agent access to read-only and protected demo tools.

Drafts/dry-runs available; no external change.

PlatPhorm

Claws

Platform

Protected action

Remediation workflow handoff; protected and scaffolded for this UI phase.

Server-side approval required to act.

PlatPhorm

BrowserOps

Evidence

UI scaffold

Evidence capture journeys and screenshots for synthetic or authorized scopes.

Interface built; backend wiring pending.

PlatPhorm

SearchOps

Discovery

UI scaffold

Bounded discovery planning; no live scan in demo mode.

Interface built; backend wiring pending.

PlatPhorm

Evals

Quality

Future

Validate safety, clarity and no-fake-live-state claims.

Planned on the roadmap.

PlatPhorm

Trace

Auditability

Dry-run

Trace-linked proof for local dry-run events.

Drafts/dry-runs available; no external change.

PlatPhorm

Product Hunt

Growth

Future

Launch + reach signals (read-only).

Planned on the roadmap.

Product HuntPRODUCTHUNT_TOKEN

Related findings

Synthetic exposure objects connected to this surface.

EXP-001HighNew exposure

Aggregated people-search profile with home + relatives

Single most reused source feeding downstream aggregators.

EXP-002CriticalValidated

Property record links residence to principal name

Highest physical-risk exposure in the case.

EXP-003MediumAction ready

Reserved mobile number indexed against principal

Direct path to account-takeover via OTP.

EXP-004HighAction ready

WHOIS-style metadata exposes personal email

Links online identity to physical contact details.

Guarded interactions

All sensitive controls are honest scaffolds.

Check integration state

No external action taken from this UI phase.

Dry-run

Evidence, risk, work, approval, report

The single loop remains visible from every route.

Discover

12 findings

Evidence

12 records

Score

54 -> 78

Operate

12 tasks

Prove

report + trace

Cloak Harbor Personal Exposure DefenseProduction pilotHuman approval requiredNo live scrapingNo external sendingResponsible-use policy