Pages
Teams & Users — Strip Windows

Source: qdash /teams — c67 horizons, built · 2026-08-15

The horizon catalog's graduates and strongest ✓ windows, built at full fidelity — each in the home the catalog assigned it: focus-card blocks, verdict lines, receipt rows. Not new dashboards; new depth behind marks that already exist. House laws hold: receipts re-add (the hygiene block cross-foots to Coverage's gap), projections carry their label, thresholds are printed, overnight autonomy is framed on agents — never on people.

1

The governance ledger — dividend & friction, one block

home: focus card + /controls · tool_calls + egress_decisions · ✓ today

What enforcement did, and what it cost the people governed — either side alone is propaganda, the pair is receipts. The un-allowlisted MCP server is promoted because it's 93% of the week's friction and one action closes it.

Support-Ops — governance, both sidesthis week · thresholds none — these are counts, not judgments
The dividend — enforced by policy · 38
21×egress to unlisted hosts held for decisionegress allowlist
9×secret-class file opens redacted from contextcredential redaction
6×destructive ops routed to human approvaloperation gates
2×sessions killed by spend guardraildaily budget
"enforced," never "prevented" — the counterfactual isn't ours to claim
The friction — denials paid · 41
38× jira-mcp tool calls denied — server never allowlisted; every denial by config, zero by a human choice
2×file writes outside workspace deniedconfig
1×egress denial appealed and overriddenuser
≈ 12 min of waiting on walls this week · pair rule: this panel never renders without the one beside it
2

The runway board

home: verdict line on breach + Cost Center · campaigns table · ✓ today

Every team with a campaign target, spent vs projected vs ceiling. The projection is a straight line at the current 7-day rate and says so — an argued estimate, not a chart of the future.

Research breaches its ceiling ~Aug 24 at the current 7d rate — everyone else lands inside ·
Research$900 spent · day 15 of 31projected at current 7d rate — labeled estimatecampaign ceiling $1000 (at_most · 30d)$1042 proj vs $1000 — breach
ML-Infra$4200 spent · day 15 of 31projected at current 7d rate — labeled estimatecampaign ceiling $9000 (at_most · 30d)$8520 proj vs $9000 — inside
Payments-EU$2900 spent · day 15 of 31projected at current 7d rate — labeled estimatecampaign ceiling $6500 (at_most · 30d)$5894 proj vs $6500 — inside
Support-Ops$300 spent · day 15 of 31projected at current 7d rate — labeled estimatecampaign ceiling $900 (at_most · 30d)$620 proj vs $900 — inside
solid = spent · dashed = projection, labeled · tick = campaign ceiling (at_most · 30d window, baseline snapshotted by the backend) · day 15 of 31
3

Fleet hygiene — Coverage's descent floor

home: click the Coverage gap → this · inventory tables · ✓ today

The portal law owed Coverage an honest landing: click the amber gap, get the named machines and processes — each with the one action that closes its row. The receipt re-adds to the gap the chip showed.

Core-Banking — 8 of 11 machines instrumentedgap: 3
cb-lt-04laptop · claude-code installed, not instrumented · owner m.varga
cb-lt-07laptop · cursor installed, not instrumented · owner unknown
proc:81442aider running on cb-build-1 — visible, outside instrumentation
cb-lt-02claude-code 1.16 — 3 versions behind fleet-max (1.19); absolute lag needs the version feed
cb-ws-9zombie: windsurf installed 60d, never run
receipt2 uninstrumented laptops + 1 shadow process = the gap of 3 the chip showed · plus 2 hygiene rows that don't count against coverage (version lag, zombie) — listed because a click should show everything it owns
4

The ramp panel

home: focus card · first_seen + session cadence · ✓ today

Every joiner from the last 30 days, sessions/day against their team's steady band. The panel's job is the stalled one — green ramps need nothing; grey flatlines get the check-in.

chenin band day 8
Frontend · day 12
Frontend steady band: 2–5/dayday 1 — 0 sessionsday 2 — 1 sessionday 3 — 1 sessionday 4 — 2 sessionsday 5 — 1 sessionday 6 — 3 sessionsday 7 — 2 sessionsday 8 — 4 sessionsday 9 — 3 sessionsday 10 — 5 sessionsday 11 — 4 sessionsday 12 — 4 sessions
ramped clean — nothing to do
o.baptistein band day 5
Payments-EU · day 9
Payments-EU steady band: 3–7/dayday 1 — 0 sessionsday 2 — 1 sessionday 3 — 2 sessionsday 4 — 2 sessionsday 5 — 4 sessionsday 6 — 3 sessionsday 7 — 5 sessionsday 8 — 6 sessionsday 9 — 5 sessions
fastest ramp this quarter
k.oseistalled
Core-Banking · day 14
Core-Banking steady band: 2–6/dayday 1 — 1 sessionday 2 — 1 sessionday 3 — 0 sessionsday 4 — 1 sessionday 5 — 0 sessionsday 6 — 0 sessionsday 7 — 1 sessionday 8 — 0 sessionsday 9 — 0 sessionsday 10 — 0 sessionsday 11 — 1 sessionday 12 — 0 sessionsday 13 — 0 sessionsday 14 — 0 sessions
day 14, never reached the band —
band = the team's p25–p75 sessions/day (printed per team) · "days to band" is the enablement number: Frontend median 8d · Payments-EU median 11d
5

Unattended autonomy

home: verdict line when nonzero → this list · ✓ today · framed on agents, never people

A standing condition, not an anomaly: sessions that ran overnight with approval=never and real egress. No baseline needed, no behavior profiled — the config and the clock are both facts about the agent run.

6 agent sessions ran unattended overnight — approval=never · 2 reached hosts first seen that night ·
codex @ shared-runner-203:12approval=never · egress to telemetry.svc.devfirst-seen host1.3M
claude-code @ ml-ws-402:40approval=never · long eval run, known hosts only4.1M
aider @ cb-build-104:55uninstrumented process · destination unknownfirst-seen host—
ci-pool (3 runs)00:30–05:10pipeline window · yolo label on 1 of 3 runs2.8M
overnight = 22:00–06:00 machine-local (threshold printed) · rows name runs and configs — never "who was working when"
6

Two receipt rows — secret dwell & the blowout

homes: /identity · Cost Center — shown here as the rows they'd be
Secret dwell — /identity
AKIA…R7Q211 days in prompts· 3 sessions · felix's dotfile, most likely — recurrence pattern matches ~/.env
dwell, not "exposure prevented" — we report time, not counterfactuals
The blowout — Cost Center / Spend receipt
$212one ci-pool session· 40 min · 5.9M tokens · all cache-miss Opus · 5.2% of the month
a receipt, not a target — tail risk stays visible, never gamified

Qpoint Brand Style Guide