The trust dashboard
A guided tour of every dashboard surface — Overview, Requests, Traces, Cost, Providers, Pricing, Live, Routing/Policy/Honesty/Calibration, Alerts/Anomalies/Budgets, and Governance — each honest on every pixel.
On this page
Everything in the CLI is also a web UI. TokenTriage ships an embedded trust dashboard on
the admin plane — the same numbers, the same honesty posture, rendered as a self-contained
SPA (go:embed’d, strict CSP, no external assets). Turn it on with dashboard.enabled: true and open http://127.0.0.1:9090/ui/, or boot the whole thing against a watermarked
synthetic ledger with no API key:
$ tokentriage demo
dashboard: http://127.0.0.1:<PORT>/ui/ # ephemeral loopback port — open the printed URL
Press Cmd/Ctrl+K anywhere for a command palette (jump to a view, a surface, or a request id).


Honesty, on every pixel
The dashboard never shows a number it cannot defend:
- Every dollar carries provenance — amounts render through a typed
Moneycomponent stamped with the pricing snapshot; estimates wear anESTflag; and UNPRICED spend is a first-class excluded slice, never rendered as$0.00. - Budgets are honest about enforcement — a budget is alert-only or enforcing; enforcement is fail-open (a dead evaluator suspends it, traffic flows, the badge says “suspended”); and a breach discloses an approximate-overrun bound, never a false-precise number.
- Anomalies name their method (
robust-seasonal-v1) and print an affirmative negative when nothing is wrong. - Verdicts can say no — the honesty surface renders the same
evalverdict as the CLI, including “insufficient labels,” and aroute without shadow evidencebadge. - Every chart has a “view as table” affordance — the exact rows behind the picture.
The surfaces
The left rail is the trust ladder made navigable (routes are under /ui):
| Surface | Route | What to look for |
|---|---|---|
| Overview | / |
The spend pulse, the token-type breakdown, health, and whether you can climb a rung. |
| Requests | /requests |
The explorer over the whole log — faceted filters, saved views, export. |
| Traces & agents | /traces |
Per-trace cost waterfalls (dollars, not ms) and the sub-agent fan-out. |
| Cost | /cost (+ /breakdown, /chargeback, /recommendations, /realized, /reconcile) |
Drill-down spend, the finance views, graded recommendations, and reconciliation. |
| Forecast / Metacost | /forecast, /metacost |
Banded projections, and what the measurement itself cost. |
| Providers | /providers |
Upstream cards — dialect, health, pricing lineage; keys as references only. |
| Pricing | /pricing |
The embedded snapshot browser with source@date#sha7 provenance and UNPRICED triage. |
| Live | /live |
The off-path SSE tail of costed rows arriving. |
| Cache | /cache |
Response-cache posture: hit rate, licensed savings, evidence. |
| Routing / Policy / Honesty / Calibration | /routing, /policy, /honesty, /calibration |
The mode cockpit and promote gate, the rule builder, the eval verdict, and calibration artifacts. |
| Alerts / Anomalies / Budgets | /alerts, /anomalies, /budgets |
Rule states, method-named findings, and burn-down with the overrun bound. |
| Governance | /governance (+ /v2, /health) |
Keys & tenants, the limit-config flow, and distributed-governance health. |
| Fleet | /fleet |
The replica roster and coverage denominator (a single node reports an honest “1 of 1”). |
| Settings | /settings |
Running config, validate → diff → apply, auth admin, and the audit log. |



The full operator manual — auth modes, budget semantics, content capture, retention, and
pricing overrides — is docs/DASHBOARD.md.
Each surface maps to a guide: Cost analytics,
Routing, Governance,
Anomaly detection, and
Observability.