PARTIAL Lane 1 is incomplete. 3 of 412 deliveries in this window failed to parse, so their downstream paths are missing. delivery 7f31c9a2-4d18-11ef-9b3e

SIGNAL MAP · {{ org }}

No webhook deliveries in this window.

The map is built from deliveries, not from configuration. It stays empty until an app you operate is installed on a repository and an injection point matches an event. Here is the shape it will take.

Last delivery received: never · webhook endpoint verified 2026-08-11 09:14Z

01 SOURCES {{ srcMeta }}

group · data

Deliveries present but unparseable: payload schema mismatch on workflow_run.completed.

delivery 7f31c9a2-4d18-11ef-9b3e
hook_id 481920377 · attempt 3/3

02 TRIGGERS {{ trigMeta }}

@MENTION

03 IDENTITIES {{ identMeta }}

{{ a.handle }} [bot]

04 OUTCOMES {{ outMeta }}

SIGNAL LIST

Below 1080px the four lanes lose the horizontal room they need to stay legible, so the map degrades to the same paths ranked by volume. Filters, the drawer, and replay all still apply.

{{ replayPos }} · {{ replayT }}

REPLAY IDLE

{{ eventTotal }} events · press PLAY to step through

Identities

{{ identMeta }} · one separately installed GitHub App per row

Square glyph = an app you operate. Round avatar = a human. Handles are canonical and case-sensitive in mention matching.

{{ det.handle }} [bot]

{{ det.appId }} · {{ det.verLive }} {{ det.label }}

SUCCESS RATE

SPEND · 14 PERIODS · DASHED LINE IS THE IDENTITY CAP {{ det.spendStr }} / {{ det.capStr }} · Aug 1 – 13

PRIMARY TRIGGER {{ det.primaryTrigger }} MODEL ROUTE {{ det.route }} CANONICAL HANDLE {{ det.mention }}

RUNSHAREPO · PRCONCLUSIONDURCOSTCONFIG

Versions are immutable. A label is a movable pointer to exactly one version, so a rollback repoints the label and edits nothing.

Blast radius is the point of this tab: a skill bundle pinned by several identities means one promotion changes several agents' behaviour at once.

SPENT · Aug 1–13

of {{ det.capStr }} identity cap

FORECAST · Aug 31

at the current rate

ENFORCEMENT RUNG

REST requests · this installation · current hour{{ det.rest }}

GraphQL points · metered separately{{ det.gql }}

PERMISSION SCOPES GRANTED TO THIS APP

CREDENTIAL · REFERENCED, NEVER STORED

FINGERPRINT {{ det.app.fingerprint }} RESOLVED AT {{ det.app.resolvedAt }} ROTATION {{ det.app.rotated }} · {{ det.app.rotLabel }} TOKEN TTL {{ det.app.ttl }}

The key body is never sent to SWITCHBOARD. It holds a reference, resolves it at mint time, and shows you the fingerprint so you can confirm which key is in play without seeing it.

{{ ip.name }} {{ ip.stateLabel }} published {{ ip.pubVer }}

→ draft {{ ip.draftVer }}

INJECTION POINTS · {{ injCount }}

PANE 1 TRIGGER

RECURSION fired by {{ ip.recursive }}

An agent's own button click is a trigger. Multi-step work composes out of single-turn runs: the run posts an action, a human clicks it, GitHub delivers check_run.requested_action carrying the identifier, and this injection point wakes the next turn.

PANE 2 CONDITIONS matched {{ ip.matchN }} of the last {{ ip.matchOf }} pull requests

ALL OF

PAIRED GLOB changed X without changing Y {{ p.hit }}

CHANGED {{ p.a }} WITHOUT {{ p.b }}

MENTION MATCH First-class condition, not a regex you maintain.

GitHub does not deliver mention notifications to apps and does not offer app handles in autocomplete, and @name[bot] does not render as a mention link. SWITCHBOARD subscribes to the comment webhook and parses the body for the canonical handles below, tolerating a leading @, the [bot] suffix, and code-fence exclusion.

MATCH PREVIEW · LAST 3 COMMENT BODIES

DRY RUN {{ dry.repo }} #{{ dry.pr }} {{ dry.sha }} nothing was posted

CONDITION EVALUATION

PROJECTED COST

PROJECTED LATENCY

TOKENS

WOULD HAVE POSTED

BATCH DRY RUN · LAST 20 PULL REQUESTS {{ batch.fired }} would fire · {{ batch.total }} projected

PRREPO · TITLEVERDICTCOSTLATENCY

#{{ b.pr }} {{ b.repo }} {{ b.title }} {{ b.verdict }} {{ b.cost }} {{ b.lat }}

PANE 3 BINDING

{{ ip.handle }} [bot]

CONFIG

MODEL ROUTE {{ ip.route }} COST CEILING {{ ip.ceiling }} per invocation TOOL ALLOWLIST

GITHUB PREVIEW what the check run will render as

{{ ip.handle }}[bot] · status completed

ANNOTATIONS {{ ip.annCount }} of 50 per API request

ACTIONS {{ ip.actCount }} of 3 max

id {{ a.id }} {{ a.idLen }}/20 label {{ a.labLen }}/20 desc {{ a.descLen }}/40

CONCLUSION · SETTABLE BY AN APP

STALE Rendered on historical runs but never offered here — only GitHub sets it. startup_failure is not a check run conclusion at all; it belongs to check suites and workflow runs.

Runs

RUNIDENTITYREPO · SHA · PRCONCLUSIONDURCOSTCONFIGWHEN

Budgets

org northwind-labs · {{ budget.period }} · {{ budget.periodFull }}

AXIS A MONETARY org · {{ budget.period }}

{{ budget.spent }} / {{ budget.cap }} cap {{ budget.spentPct }}

FORECAST TO Aug 31

CONE

{{ budget.fLo }} – {{ budget.fHi }}

BURN RATE

{{ budget.rateNote }} · forecast lands at {{ budget.fPct }} of cap if the rate holds

AXIS B GITHUB RATE LIMIT per installation · current hour

The allowance belongs to the installation, not to a repo, and it is computed — not 5,000. REST counts requests, GraphQL spends points; summing them would be wrong, so they are separate meters.

REST{{ i.rest }} · {{ i.restPct }}

GRAPHQL pts{{ i.gql }} · {{ i.gqlPct }}

@auditor allowance {{ auditorFormula }}

PERIOD BURN-DOWN cumulative spend · forecast cone · version promotions

Aug 1Aug 13 · todayAug 31 · cap {{ budget.cap }}

Spend tripled on Aug 8. The promotion marker on the same day is @warden cfg_v18 -> cfg_v19, which widened the secret pattern set from 12 to 41 and moved the route from haiku to sonnet.

ENFORCEMENT LADDER

none

Configured per node in the hierarchy. A child inherits its parent's ladder unless it declares its own.

BY IDENTITY · org · {{ budget.period }}

{{ b.n }}{{ b.amt }} / {{ b.cap }}

BY REPO · top 6 of 34

BY MODEL · routing is the cost strategy

HIERARCHY · org → repo → identity → injection point → invocation

SCOPECAPSPENTFORECASTENFORCEMENT

ANOMALY FEED

INVOCATIONS 40 of 50,000 rendered · windowed · org · {{ budget.period }}

Apps & Keys

7 operated apps · 1 sign-in app · no key material is rendered anywhere in this product

SIGN-IN APP · AUTHENTICATES YOU · DOES NOT DO WORK

{{ signIn.name }} {{ signIn.appId }} ROUND AVATAR · NOT AN OPERATED APP

CAN {{ signIn.can }} CANNOT {{ signIn.cannot }}

OPERATED APPS · SQUARE GLYPH · THESE DO THE WORK

{{ a.display }} {{ a.handle }}[bot] {{ a.appId }} · {{ a.installs }}

WEBHOOK DELIVERIES · 24H

REST HEADROOM

{{ a.rest }} per hr

FINGERPRINT {{ a.fingerprint }}

ROTATED {{ a.rotated }} · {{ a.rotLabel }}

TOKEN TTL {{ a.ttl }} minted {{ a.lastMint }}

LAST AUTH FAILURE {{ a.authFail }}

ADD APP 4 steps · nothing is stored until step 4

FAILURE MODE {{ w.fail }}

RESOLVE AND VERIFY · POSSIBLE OUTCOMES

Versions

immutable numbered versions · labels are movable pointers to exactly one version

DEPLOYMENT TIMELINE · Aug 1 – 13 the same markers overlay the budget burn-down and the Signal Map

VERSIONED ENTITIES

{{ vers.selName }} {{ vers.selType }} {{ vers.selOwner }} affects {{ vers.affects }}

VERSIONAUTHORWHENCHANGE SUMMARYLABELS · ACTIONS

PROMPT DIFF · WORD LEVEL · cfg_v18 → cfg_v19

cfg_v18

cfg_v19 · production

INLINE

CANARY Two labels plus a split rule the router owns.

A label resolves to exactly one version, so a percentage cannot live on a label. The traffic percentage is a property of the route: the router reads both pointers and picks per invocation.

{{ p.label }} → {{ p.ver }}

{{ p.pct }} of route traffic

COMPARISON · production vs canary

METRICv19 prodv20 canary

v20 is 54% more expensive per invocation and 22% faster, and raises the action_required rate. On 40 sampled invocations that is a signal, not a conclusion.

Design reference

one screen · tokens, scale, and the status-encoding rules

COLOUR TOKENS · SEMANTIC ROLE

TYPE SCALE

SPACING SCALE

ELEVATION

flat

nodes, rows, cards. Border only, no shadow.

drawer

one directional shadow, cast inward from the edge it slid from.

modal

the only surface that dims the app behind it.

STATUS ENCODING RULES

RESPONSIVE

This is a desktop tool and does not pretend otherwise. Below 1080px the Signal Map degrades to a ranked path list — the lanes need horizontal room the tablet does not have — while Budgets, Runs, and the kill switch keep working at 1024px because those are the on-call surfaces.

NOTIFICATIONS {{ notifCount }} unresolved

GO esc

403 PERMISSION DENIED

Your sign-in app cannot read {{ deniedScope }}.

SWITCHBOARD authenticated you through switchboard-auth with read:user and read:org. This surface needs the operator role on northwind-labs, which is granted in the org, not here.

signed in as dana-reyes · role viewer
request id 4c19a8f0-9d21-11ef-b3ac

NOT BUILT YET

placeholder · direct this surface next

{{ edgeFrom }} → {{ edgeTo }}

SHA / PRCONCLUSIONDURCOSTCONFIG

{{ dIdent.handle }} [bot]

Canonical handle. GitHub does not autocomplete app handles or notify apps of mentions — SWITCHBOARD matches the body text.

SPEND · 14 PERIODS {{ dIdent.spend }} / {{ dIdent.cap }}

CONFIG VERSIONS

LIVE

PERMISSION SCOPES · MODEL ROUTE

route{{ dIdent.route }}

KEY REF {{ dIdent.keyRef }} rotated {{ dIdent.rotated }}

RECENT RUNS

PROVENANCE exactly what was live when this answered

TIMELINE · MODEL AND TOOL CALLS

OUTPUT · AS POSTED

CLICKED {{ a.clickNote }}

CONVERSATION · DISCUSSION THREAD

MENTION GRAPH