Operator admin · LoanLedger

Operations overview

What needs you now Loading

Checking action queues, production state, and recent operator activity.

Needs attention

Only queues with work waiting on an operator appear here.

Loading action queuesChecking account, moderation, and message intake.

Recent activity

The five latest audited operator actions. Sensitive payloads stay in the audit authority.

Open audit

Loading audit activityChecking the operator audit trail.

Production state

Runtime identity and product availability, not corpus totals.

DeploymentChecking…

BuildChecking…

RegistrationChecking…

SignalsChecking…

Private LedgerChecking…

WardenChecking…

Operations Signals console Requested records Rules & Config

Safety controlsAudited changes

Access

Closing registration rejects new sign-ups without affecting existing accounts.

New registrations

Current state: Checking…

Automatic Free access

New accounts get Ledger and Signals at once, or wait for approval. Current state: Checking…

Guard rails

Break-glass controls for public writes and site-wide maintenance.

Content freezeReject public records and submissions; operators remain exempt.

Maintenance modeShow a site-wide notice and lock member writes while reads stay available.

Product availability

Master switches shown to members. Operators retain recovery access.

SignalsMember Signals product.

Private LedgerMember ledger product.

WardenDurable member launch state.

Published homepage snapshot

Graph as of—

Signal evidence as of—

Published to production—

Auto-publish—

Members

Review account access and Pro grants. Open a member to manage their permissions.

Waiting for access

Checking waiting accounts…

Pro lifecycle

Holders: —
Comped: —
Paid: —
Lapsed: —
Due soon: —
Permanent: —

Loading Pro lifecycle…

Search members

Loading members…

Loading authoritative account access…

Member

—

Audit note for the next change

Each control changes one authority only. Warden Read and Warden Submit are separate, operator-granted lender permissions.

Lifecycle: —
Approval: —
Role: —
Ledger: —
Signals: —
Pro: —
Warden: —
Account record: —

Ledger adoption

Aggregate usage only. Borrower names, notes, money, and private records remain unread.

Loading usage…

Account lifecycle

Approval, suspension, revocation, and restoration remain separate from plan and product access.

Role and member grants

Moderator authority and community grants are independent. Operators and self-targets fail closed.

Product access

Ledger and Signals Free are included with approved account access. Pro and Warden grants are managed separately.

Private Ledger—

Pro—

Change

Until

Direct payments

Loading payments...

Other grantsLegacy, derived, and integration keys are not editable here.

Warden access

Grant Read and Submit independently to trusted lenders and moderators. Submit is consequential: it lets the member create subjects through intake, edit fields and aliases on entries they filed, upload evidence images, corroborate, vouch, and change a subject's status. It does not grant staff management.

Destructive account actions

Soft delete disables the account record. Purge permanently removes the account and its private Ledger data after an impact preview.

Advanced account toolsDirect credential creation and local test-account cleanup. Use deliberately

Create an account with a password

Members can register directly. Use this only when an operator must set credentials and can deliver them securely out of band.

Clean up system-test accounts

Local runtime only. Preview explicitly marked system-test accounts, narrow by email or test key, then choose the exact rows to purge.

Email or test key contains

Nothing has been previewed.

Payments

Direct payments recorded by an operator. Voided entries stay in the list.

Loading payments...

Moderation

The production gate. Signals members submit pass through here before they become searchable. Decisions hit the live moderation backend (/admin/signal/moderation) and every action re-fetches from the server. Escalate holds an item for a second reviewer without deciding it.

jk select · enter open · a/r approve/reject

· shown

Queue clear.

Nothing waiting for review. New submissions land here the moment members post them.

Signal intelligence

Unpaid signals collected from Reddit and Discord lending communities. Signals enter a moderation queue before becoming searchable by lenders via GET /signal/search.

Free-tier lookup cap

Daily limit on GET /signal/lookup per free-tier user (UTC day). Pro users with module_signal_pack bypass, and as of 2026-06-09 all approved (permitted) accounts bypass too. This cap only bites a future unapproved tier. 0 = unlimited (operator escape hatch). -1 = gate disabled (kill-switch).

Lookups per day

Signal collector

helper… task…

Signals

Occurred to

0 selected

Cross-community subjects

Borrowers reported across 2 or more subreddits: highest-priority moderation targets.

Min communities Sort Limit

Loading…

Audit

Immutable trail of operator actions (accounts, entitlements, signals, disputes, and related changes).

Loading

Invitations

Choose the access path, create a one-time credential, then track its lifecycle without exposing the secret again.

Three distinct grants: codes and lender invites create lender access; operator invites create staff authority. Pro and Warden remain separate.

Registration codes

Create attributable registration codes, hand them off, and follow each code through redemption or revocation.

Access boundary: redemption creates an approved lender with Web Ledger access. Pro and Warden remain separate grants.

Mint and share

Use operator-direct for one lender or community for a named subreddit batch. Minting is recorded in the operator audit trail.

Channel How this code will be distributed. Recipient / source Name the intended lender or community. You can correct this later. Internal notes Optional operator context. This stays in Admin.

Uses per code Usually 1 for a direct invite. Expires in days Enter 0 for no expiry. Number of codes One code or a batch of up to 200.

Mint once, copy the result, then track it below.

Loading invite codes…

Notification manager

Manage the copy lenders receive, send manual notices, and review the delivery log.

Total sent

—

Unread (all lenders)

—

Notification templates

Click Edit to customise the title and body lenders receive.

Event-triggered

Name	Category	Sent	Active title

Automated emitters

Name	Schedule	Sent	Description

Compose & send

Send to one lender or broadcast to an audience. In-app always delivers; email also sends for account/billing/system categories when the lender has email delivery on.

Recipient account …or user ID / email

Category Title

Body (optional)

Advanced: send through a template key

When

Queued sends

Scheduled notifications waiting to fire (and recent ones). The drainer dispatches due sends within a minute.

When	Recipient	Title	Status

Lender inbox

Read-only view of a specific account's notification feed.

Account Category

Emitter controls

Pause or resume system-triggered notification emitters by template key.

Loading notification emitters

Delivery log

Category Read status Search email Per page

Rules & Config

Volatile operator knobs, changed live: no deploy, no restart. Each value is stored as data; the code ships a safe default, so an unset knob behaves exactly as before. Edits hit /admin/config and are written to the audit trail.

Brand

Brand & Logodefault

brand.logo_variant

Switch the LoanLedger mark the whole suite renders. Applied live and read per-environment. This LOCAL build and PROD keep separate settings. Leaving it on the shipped identity renders exactly what ships today.

Colorway

Show LOCAL badge next to the mark brand.show_local_badge

The preview reflects your selection before you save. Saving writes to /admin/config and the audit trail.

Loading configuration…

Media

Site media

/admin/media

Upload site images (logos, page art, help screenshots) as runtime data, no deploy. Each file gets a permanent content-addressed URL you can paste anywhere; replacing an image = uploading the new one and using its new URL. JPEG/PNG/GIF/WebP only (checked by content), 10 MB max. Deleting hides an asset (its URL stops serving); re-uploading the same file restores it.