Server-side integration
Postcode credentials and verification controls remain on the server. The browser never receives a privileged service key.
Technical documentation
These notes describe the current prototype honestly: what it does, what it does not yet do, and the decisions made to keep operational claims grounded.
Architecture
The browser uses the core API through the same public origin. The API keeps sensitive credentials and protected operational actions off the public client. The field app signs in separately and submits evidence with its field identity.
Data flow
Architecture decisions
Postcode credentials and verification controls remain on the server. The browser never receives a privileged service key.
The UI labels fixture, test and official responses so operators can judge whether a result can support a real operation.
Provider-backed explanations are optional. They do not decide a postcode or override a source-backed resolution.
ETA telemetry starts with an explainable baseline. Learning claims require consented, verified arrival data.
Trade-offs
Current status
The public workspace demonstrates address resolution, source labelling, demo dispatch planning, quality checks and ETA telemetry. Approved pilot organisations can sign in, create protected workspace plans and issue one-time operator invitations. Field agents continue to use separately provisioned mobile accounts. Password recovery and managed email delivery are the next operational milestones.
Read the access guide