Exact IDs first → normalized/fuzzy matching → safe intent routing. Permissions are applied before results are built.
Important authorized changes only — no need to check every module.
One status first. Drill down only if something matters.
One trust status first. Freshness, lineage and source details stay one click away.
Only exceptions requiring review, ordered by impact.
Recommendation only — human remains in control.
GMV, platform revenue, refunds, seller payable and tax remain separate.
Ask the business in plain language. Evidence and confidence are mandatory.
Route to the controlled workspace — no hidden business mutation.
Personal dashboard configuration only. It never changes Orders, money, stock or vendor status.
D01 explains the action and routes you to the controlled workflow. It does not execute the business action.
Server-derived role and data scope — browser IDs are not authority
One-glance incident, SLO and customer-impact intelligence. Evidence first; human decision always.
Core commerce stays available even if optional AI, analytics or notification dependencies fail.
Provider-neutral real-login readiness: independent identity, MFA/passkey assurance, trusted device and safe session policy.
True second-person approvals for high-risk changes. One requester cannot approve their own request.
Delegated access now comes from a persistent, versioned policy store.
Super Admin sees everything. Delegated Admins receive only server-authorized modules/actions.
Simple answer: Are we safe right now, why, and what should I review?
Finance, feature-control and security changes require permission + fresh re-auth.
One action ranked above the noise
Who should act next — without mixing permissions
Storekeeper: pick overdue order #KZ-10482 first.
Vendor: TechBay should replenish 3 low-stock SKUs.
Main Admin: review CT-4208 stock variance and security alert.
Short, readable, on demand
Flags the unusual pattern before you need to notice it manually
Core commerce survives AI/analytics failure
Examples: “why did sales drop?”, “which vendors need attention?”, “what is my biggest risk?”
Answers are advisory. The assistant cannot change price, stock, commission, money, payout destination, vendor status, warranty, publishing or financial history.
Score pressure comes mainly from fulfillment delay, stock mismatch frequency and low-stock exposure. No single fraud signal is enough for punitive action.
On demand is interactive in this preview. Scheduled email/notification delivery requires backend scheduler + preference + delivery-channel wiring.
When AI/analytics is down:
Critical finance-integrity failures should fail closed rather than guessing.
Permission-aware shortcuts
A reason is required so the decision remains explainable and auditable.