MEDIEOS KCC · v3.1.1

Regiezentrum für lokale, sichere Ökosystemarbeit

A00 hält Produktbau, interne A21/A00/OMEGA-Prüfung, Connector-Gates und M3-Grenzen sichtbar getrennt. Keine Secrets, keine Live-Mutation, kein Deployment.

Ökosystemstatus

  • Runtime: local-only
  • Plugins: deny-by-default
  • Business connectors: read-only
  • Content connectors: read-only

KCC Settings

Freigabezentrum, Tenant-Kontext und White Label

Tenant sichtbar: MEDIEOS Demo Tenant. Tenant-ID bleibt immutable; KCC ist Oberfläche, Server/RLS/Gates bleiben Sicherheitsgrenze.

White Label

MEDIEOS KCC

Theme Accent: #7C3AED

Release erlaubt: Nein

Branchenprofile BS01-BS26

26 Profile geplant und lokal sichtbar.

Aktiv: BS01

M2 Evidence Review

Gate: M2

Status: human-gate-required

M3 Payment / Contract

Gate: M3

Status: blocked-live-action

Secret Injection

Gate: M2

Status: human-gate-required

  • GitHub Read-only: read-only-ready; Live Write: NO
  • Supabase Read-only: read-only-ready; Live Write: NO
  • Cursor Factory Local: local-dev-test-only; Live Write: NO
  • Dashboard Preparation: blocked-release; Live Write: NO

White Label · BS01-BS26 · Connector Gates

MEDIEOS KCC Demo

Audio Default: OFF. Ungenutzte Tools bleiben verborgen. Dashboard-Vorbereitung bleibt lokal ohne Release.

BS01 · Gastro & Café

Cluster: money-and-evidence

Connectors sichtbar: 5

BS02 · Bau & Handwerk

Cluster: field-and-workflow

Connectors sichtbar: 6

BS03 · Bürokratie & Office

Cluster: default-kcc

Connectors sichtbar: 7

BS04 · Kreativ / Foto / Content

Cluster: default-kcc

Connectors sichtbar: 4

BS05 · E-Commerce

Cluster: money-and-evidence

Connectors sichtbar: 5

BS06 · Finance & Backoffice

Cluster: money-and-evidence

Connectors sichtbar: 6

BS07 · Health Services

Cluster: default-kcc

Connectors sichtbar: 7

BS08 · Beauty & Wellness

Cluster: default-kcc

Connectors sichtbar: 4

  • Google: AUTH_REQUIRED; Live Mutation: NO
  • Microsoft: AUTH_REQUIRED; Live Mutation: NO
  • Stripe: M2_REVIEW_REQUIRED; Live Mutation: NO
  • Qonto: M2_REVIEW_REQUIRED; Live Mutation: NO
  • Lexware: M2_REVIEW_REQUIRED; Live Mutation: NO
  • ELSTER: M2_REVIEW_REQUIRED; Live Mutation: NO
  • WordPress: M2_REVIEW_REQUIRED; Live Mutation: NO
  • YouTube: M2_REVIEW_REQUIRED; Live Mutation: NO
  • Instagram: M2_REVIEW_REQUIRED; Live Mutation: NO
  • TikTok: M2_REVIEW_REQUIRED; Live Mutation: NO
  • LinkedIn: M2_REVIEW_REQUIRED; Live Mutation: NO

Dashboard Release erlaubt: NO

Voice to Card Router

Mikrofon-Entry ist sichtbar, Voice Default bleibt OFF

Microphone entry: visible · Voice default: OFF

M1_READONLY_STATUS_CARD

Intent: read_status

Tenant: tenant_demo · Branch: BS01

M3_DECISION_CARD_REQUIRED

M3 Execution allowed: NO

Live connector mutation: NO

3 normative route examples are locally materialized. Direct-send is never allowed for M2/M3.

KCC Cockpit

MEDIEOS KCC

Tenant visible · Branch BS01 · Audio OFF · Release NO

Google

Status: auth_required

Asset: brand_safe_fallback

Live Write: NO

Lexware

Status: m2_required

Asset: brand_safe_fallback

Live Write: NO

Read-only status

Gate: M1

Protected: NO

Approval draft

Gate: M2

Protected: YES

Protected decision

Gate: M3

Protected: YES

  • M1_READONLY_STATUS_CARD: M1; Live Mutation NO
  • M2_APPROVAL_DRAFT_CARD: M2; Live Mutation NO
  • M3_DECISION_CARD_REQUIRED: M3; Live Mutation NO

Google Setup

Gate State: auth_required

Connected claim allowed: NO

Secrets visible: NO

Skills, Plugins, MCP

Capabilities are shown only with their configured local status. Missing live auth is a gate state, not a connected claim.

Audio Default: OFF

MEDIEOS-owned setup screen

MEDIEOS KCC · Google

Tenant: MEDIEOS Demo Tenant · Branch: BS01 · Language: de-DE

Scopes and purpose are shown before any redirect: calendar.readonly, drive.metadata.readonly

Read-only: YES · Write locked: YES

Live Mutation: NO · Provider page is never presented as KCC.

Provider-controlled screen ahead

Open Banking / Bank Provider controls the next consent or account screen. MEDIEOS keeps tenant branding only in the KCC pre-room and callback.

Redirect requires an explicit user action. OAuth and bank consent screens are not faked.

Live connector write: NO · Secret output: NO.

Callback Status

Provider: Stripe

Callback verified: not yet; status remains fail-closed until verified.

Return point: /kcc/provider/callback-status

Produktabnahme · Dashboard · Provider · Branches

KCC wirkt als zusammenhängendes Premium-Cockpit

Tenant-Kontext, BS01-BS26, Provider-Gates, Voice-to-Card und M1/M2/M3-Karten werden zusammen geprüft.

Live Mutation: NO · Product Release: NO

BS01–BS26 sichtbar berücksichtigt

BS01: Gastro & Café · Tiles: google, lexware

BS26: Mixed SME · Tiles:

Audio Default OFF · unused tools hidden · gate cards M1/M2/M3 visible.

Visual Product Acceptance

  • premium_saas_cockpit
  • not_technical_demo
  • tenant_context_visible
  • provider_tiles_are_credible
  • no_fake_connected_provider
  • provider_controlled_screens_not_faked
  • audio_default_off
  • unused_tools_hidden
  • m1_m2_m3_cards_clear
  • m3_visually_serious
  • mobile_and_desktop_respect_layout
  • no_illegal_logo_assumption
  • ui_does_not_replace_server_gates

Visual Gate: internal A21/A00/OMEGA, not Maxim. Screenshots are evidence only, not release permission.

A00 Accessibility · Responsive · Performance QA

MEDIEOS bleibt auf Mobile, Tablet und Desktop bedienbar.

Dashboard, KCC, White Label, Provider Tiles, M2/M3-Karten und Voice-to-Card werden als lokale QA-Verträge geprüft: Touch-Ziele, Tastaturfokus, responsive Layouts und Performance-Budgets bleiben fail-closed.

mobile

390px · 48px target

tablet

768px · 48px target

laptop

1280px · 40px target

desktop

1440px · 40px target

Geprüfte Produktflächen
DashboardKCCWhite LabelProvider TilesM2M3Voice-to-Card
Fokusprüfung: Zur QA-Überschrift
Keyboard / Fokus
Focus visible · no keyboard trap
Touch
48px mobile target
Performance
First Load JS ≤ 150 KB

Interactive Ecosystem Linkage Proof

KCC Aktionen sind lokal verdrahtet und bleiben gate-gesperrt.

Security QA: tenant/RLS/math/KCD/M2/M3 = PASS. Audio Default OFF. Live Mutation NO.

Google Detail Sheet

Provider ID: google

Gate State: auth_required

Connected claim allowed: NO

Provider-controlled screen faked: NO

Live mutation allowed: NO

NO_GATE_ACTION_EXECUTED

BS01 · Gastro & Café

Tenant branding visible: MEDIEOS KCC

Visible providers: Google, Lexware

Unused tools hidden: YES

Real Provider Sandbox/Auth Dry Run

Echte Provider werden vorbereitet, aber nicht live verbunden.

OAuth started: NO · Secret values visible: NO · Live connector mutation: NO · Fake connected claim: NO.

google

Family: oauth

Readiness: auth_gate_ready

MEDIEOS setup screen: YES

Provider screen faked: NO

Connected claim: NO

microsoft

Family: oauth

Readiness: auth_gate_ready

MEDIEOS setup screen: YES

Provider screen faked: NO

Connected claim: NO

github

Family: read_only_connector

Readiness: read_only_ready

MEDIEOS setup screen: YES

Provider screen faked: NO

Connected claim: NO

supabase

Family: read_only_connector

Readiness: read_only_ready

MEDIEOS setup screen: YES

Provider screen faked: NO

Connected claim: NO

stripe

Family: payment_provider

Readiness: secret_gate_ready

MEDIEOS setup screen: YES

Provider screen faked: NO

Connected claim: NO

qonto

Family: banking_provider

Readiness: secret_gate_ready

MEDIEOS setup screen: YES

Provider screen faked: NO

Connected claim: NO

lexware

Family: accounting_provider

Readiness: m3_gate_required

MEDIEOS setup screen: YES

Provider screen faked: NO

Connected claim: NO

datev

Family: tax_accounting_provider

Readiness: m3_gate_required

MEDIEOS setup screen: YES

Provider screen faked: NO

Connected claim: NO

elster

Family: legal_tax_provider

Readiness: m3_gate_required

MEDIEOS setup screen: YES

Provider screen faked: NO

Connected claim: NO

wordpress

Family: content_provider

Readiness: auth_gate_ready

MEDIEOS setup screen: YES

Provider screen faked: NO

Connected claim: NO

youtube

Family: content_provider

Readiness: auth_gate_ready

MEDIEOS setup screen: YES

Provider screen faked: NO

Connected claim: NO

instagram

Family: content_provider

Readiness: auth_gate_ready

MEDIEOS setup screen: YES

Provider screen faked: NO

Connected claim: NO

tiktok

Family: content_provider

Readiness: auth_gate_ready

MEDIEOS setup screen: YES

Provider screen faked: NO

Connected claim: NO

linkedin

Family: content_provider

Readiness: auth_gate_ready

MEDIEOS setup screen: YES

Provider screen faked: NO

Connected claim: NO

chatgpt_byok

Family: ai_byok

Readiness: secret_gate_ready

MEDIEOS setup screen: YES

Provider screen faked: NO

Connected claim: NO

gemini_byok

Family: ai_byok

Readiness: secret_gate_ready

MEDIEOS setup screen: YES

Provider screen faked: NO

Connected claim: NO

Supabase Read-only Truth

Project: MEDIEOS-KCD · ACTIVE_HEALTHY

Security findings present: YES

Performance findings present: YES

Remote DDL executed: NO

GitHub PR Readiness

Branch: eco/nightshift-max-20260815

Push allowed: NO · PR create allowed: NO