nsTags Admin Portal · staff only

Sign in

nstags-staff account. MFA is required on this surface.

Set your password

First sign-in: replace the temporary password (14+ characters).

Set up MFA

Add this secret to your authenticator app (TOTP), then enter the 6-digit code.

MFA code

Enter the 6-digit code from your authenticator app.

Config comes from config.js. No secrets live in this page.

nsTags Admin

Fleet league

A1 · loading…
TenantPlanHealthDevicesToday estYday estAlerts 24hDPDP

One precomputed read; counting columns are estimates; Today fills after the nightly finalize (absent, never a fake zero). Cost model: NO schedule runs behind this — the rollup refreshes automatically when you sign in and it is stale, or on the button. Idle cost: zero.

Tenant

Identity & plan

Entitlement flags

Computed row the apps read. Recompute + overrides become one-click here in Inc 2.

Insights cache ADR-060 cadence

Past-cadence rows self-heal on next app open.

Devices click to debug

Run diagnosis ADR-067 · read-only

Checks cannot mutate. Runs persist with your identity. Remediation buttons arrive in Inc 2.

Run history · this tenant

DEVICE

Identity & heartbeat

Latest reading PII-clean whitelist

Run diagnosis on this device

Diagnosis center

A17 · catalog · run history

Playbook catalog read-only v1

PlaybookChecksAudience
NO_DATA_ON_DASHBOARDerased → plan → flags → bound → ever-reported → heartbeat → cacheboth
FEATURES_MISSINGerased → plan row → plan vs computed flagsboth
SENSOR_OFFLINEerased → bound → heartbeat → sibling isolationboth
STALE_INSIGHTSerased → cache vs ADR-060 cadencestaff
COUNTS_LOOK_WRONGbound → heartbeat → walk-test gate (SKIP until ADR-056 Inc 3)staff

Remediations (AUTO / CONFIRM / STAFF / 4-EYES) arrive in Inc 2. Scheduled sweep: on-demand-first per the cost model, proposed at Inc 4.

Run history diagnostic_runs · newest first

Audit log

A15 · admin_audit_log · one IST day per query
WhenActorActionTargetBefore → afterReason
ships in Inc 2
Plans & subscriptions

The design for this screen is final (Round 1–3 mockup). The backend actions it needs ship in the increment above — no mock data on the production portal.