Add ISAC system metrics

2026-07-25 04:08:01 -04:00
parent 99fe6043ff
commit 14ba14dfab
9 changed files with 168 additions and 6 deletions
@@ -230,6 +230,14 @@ Use the spacing tokens for new components. Prefer `8px`, `12px`, and `20px` gaps
  before-snapshot; newer work blocks the operation. Successful reversions append
  a new `audit.reverted` event and never alter the original history. `audit.view`
  remains read-only; `audit.revert` is independently assigned.
+- System Metrics is the second read-only System Oversight surface. It uses a
+  compact KPI row for headline process health and a two-column grid of dense
+  runtime, host, database, and service-volume panels. Refresh is explicit and
+  duplicate-safe; optional auto-refresh is visibly selected and uses a
+  restrained ten-second interval. Metrics must not expose environment values,
+  credentials, full filesystem paths, or other deployment secrets. The
+  `metrics.view` permission is independent of mutation access and is included
+  in the read-only Auditor role.
 - Account deletion uses a collapsed danger zone, explicit identity confirmation,
  and plain-language retention guidance. Soft-deleted accounts retain authored
  content under a deleted-agent identity while releasing credentials, usernames,