# Product

## Register

product

## Users

Two audiences share one build, split by JWT capability gating:

- **Platform operators** (`platform_admin`) — Sky AI staff running the whole arcadia-core fleet: provisioning tenants, watching monitoring, rotating secrets, managing SSO, announcements, status page, integrations. Expert, technical, use it daily, usually on desktop.
- **Tenant admins** (`tenant_admin`) — a customer's administrator managing their own tenant: users, memberships, plan, entitlements, storage, activity. Semi-technical; may visit rarely (only when something needs changing), so rediscoverability matters more than muscle memory.

The job to be done is administrative control of a multi-tenant agentic-cloud platform: "get in, change the thing safely, verify it took effect, get out."

## Product Purpose

Arcadia Admin is the operator/admin UI for arcadia-core (multi-tenant Phoenix backend). It surfaces tenant lifecycle, user/role administration, billing (apps/plan/entitlements), storage, secrets, webhooks, scheduled tasks, SSO, announcements, status page, monitoring, and audit on top of arcadia's `/api/v1` and `/admin/*` endpoints. Success = an operator can onboard a new tenant end-to-end and change any runtime setting without reaching for iex/mix tasks or SSH.

## Brand Personality

Calm, capable, trustworthy. "Premium AI-first glass" (Skyrise theme) but the register is product: the tool should disappear into the task. Confidence through clarity and safe defaults, not decoration.

## Anti-references

- Enterprise admin sprawl (endless nested settings à la old AWS console).
- Toy dashboards — fake stat tiles, decorative charts with no drill-down.
- Anything that makes destructive platform actions (delete tenant, rotate secret) feel casual.

## Design Principles

1. **Safe by construction** — destructive/irreversible actions are explicit, confirmed, and auditable; errors name the fix.
2. **One contract, everywhere** — capability map drives nav and guards; `data-action` ids on every interactive element (AI/script drivable).
3. **Verify what you changed** — every mutation reflects visible state (toast + updated row + audit trail), never silent success.
4. **Recognition over recall** — a tenant admin who shows up quarterly should find everything from the sidebar without training.
5. **Density where experts live** — tables and panels can be dense, but each screen has one clear primary action.

## Accessibility & Inclusion

WCAG AA floor (4.5:1 body text), full keyboard operability, visible focus, labeled icons, `prefers-reduced-motion` honored. Desktop-first but mobile shell must remain usable (operators respond to incidents from phones).