Status: ACTIVE
Audit Date: 2026-03-16
Audit Basis: code-verified repository inspection

System-State Labels

• REAL: durable backend truth exists and the UI primarily uses it.
• MIXED: real backend exists, but fallback/mock/session-local paths also materially affect UX.
• UI-FIRST: mostly UI/client state; backend truth is weak or absent.
• SHELL: structural surface exists with little real domain behavior behind it.
• MISSING: major expected capability not found.

Feature Matrix

| Feature | UI State | Backend State | Persistence | Eventing | State | Evidence | | --- | --- | --- | --- | --- | --- | --- | | Auth and sessions | working portal/auth UI | real svc-auth backend | Postgres-backed | limited | REAL | services/svc-auth/src/server.ts | | Stakeholder onboarding | visible | proxy + partial reviewer gap | real in identity-infra | no strong Kafka evidence | MIXED | services/api/src/routes/stakeholder-applications.ts, packages/identity-infra/src/server.ts | | Landowner onboarding | present through stakeholder/KES surfaces | partial | partial | partial | MIXED | same as above + KES routes | | Tenders | real list/detail/admin flow | real in svc-tenders | durable Postgres | outbox/domain-events | REAL | services/svc-tenders/src/server.ts | | Auctions | strong UI | real read/admin declaration path, but action path mixed | some durable reads, local action engine elsewhere | limited | MIXED | services/svc-tenders/src/server.ts, services/api/src/routes/auctions.ts | | Bid submission | polished UI | local engine/session-local behavior dominates | not trustworthy canonically | none meaningful | UI-FIRST | services/api/src/routes/auctions.ts, apps/web/src/ui/auctions/sessionBidState.ts | | Winner flow | visible | mixed auction + session-local handoff state | partial | none meaningful | MIXED | sessionFulfillmentState, sessionTransportSelectionState | | Vacancies | real UI | real svc-tenders routes, but fallback catalogs exist | durable in service | no strong Kafka evidence | MIXED | services/svc-tenders/src/server.ts, apps/web/src/portal/api.ts | | Accommodations | real UI | real svc-tenders routes, but fallback catalogs exist | durable in service | no strong Kafka evidence | MIXED | same | | Logistics & Equipment | rich UI/workspace | mostly session-local orchestration | sessionStorage | none | UI-FIRST | apps/web/src/ui/transport/sessionTransportRequestState.ts, apps/web/src/ui/transport/sessionEquipmentRequestState.ts | | Map | visible | fixture/projection style route | not parcel-canonical | none | MIXED | services/api/src/routes/map.ts | | Parcel registry | shell UI | not proven | no trustworthy canon | none | SHELL | apps/web/src/app/[locale]/(portal)/parcels/page.tsx | | KES workspace | substantial UI | real backend exists for orchestration | durable KES tables | real Kafka/outbox | MIXED | apps/web/src/app/[locale]/(portal)/kes/page.tsx, services/svc-tenders/src/server.ts | | KES orchestration backend | low direct UI visibility but real | real svc-tenders domain backend | durable Postgres | strongest Kafka usage | REAL | kes_orchestrator_*, outbox, projection consumer | | ICPI | real service endpoints | real in svc-tenders | durable | none found | REAL | services/svc-tenders/src/server.ts | | Butkhuzi | real service endpoints | real in svc-tenders | durable | none found | REAL | same | | Carbon lifecycle | partial UI surface | real svc-carbon service | durable | UNVERIFIED | REAL | services/svc-carbon/src/server.ts | | AI docs assistant | visible | real route + RAG bootstrap | memory persisted, embeddings mixed | none | MIXED | apps/web/src/app/api/ai/ask/route.ts, apps/web/lib/docsRagBootstrap.ts | | Wallet / token / on-chain | implied by docs/vision | demos/packages only | not platform-canonical | demo Kafka exists | MISSING | packages/financial-layer demo/runtime mix | | Compliance / KYC | service exists | partial integration | likely durable | UNVERIFIED | MIXED | services/svc-kyc/src | | Declaration/output allocation | real inside tender/KES area | real in svc-tenders repository/server | durable | outbox tied for tender/KES events | REAL | services/svc-tenders/src/repository.ts |

Concrete Illusion Sources

Auction illusions

• Verified files:
  • services/api/src/routes/auctions.ts
  • apps/web/src/ui/auctions/sessionBidState.ts
  • apps/web/src/lib/mock/portalMock.ts
• Illusion:
  • UI can look like a real live auction system.
• Missing underneath:
  • canonical durable public bid mutation path in svc-tenders.

Logistics/equipment illusions

• Verified files:
  • apps/web/src/ui/transport/sessionTransportRequestState.ts
  • apps/web/src/ui/transport/sessionEquipmentRequestState.ts
  • apps/web/src/ui/auctions/sessionFulfillmentState.ts
• Illusion:
  • workspace feels operational.
• Missing underneath:
  • durable transport/order backend.

Parcel/map illusions

• Verified files:
  • apps/web/src/app/[locale]/(portal)/parcels/page.tsx
  • services/api/src/routes/map.ts
• Illusion:
  • platform appears to have a parcel registry and map-driven backend.
• Missing underneath:
  • canonical parcel registry write/read backbone.

KES UI illusion boundary

• Verified files:
  • apps/web/src/app/[locale]/(portal)/kes/page.tsx
• Illusion:
  • some workspace state looks persisted because the editor is rich.
• Reality:
  • significant workspace state is localStorage-backed even though real KES backend exists.

Safe Temporary Scaffolding vs Dangerous Debt

Acceptable temporary scaffolding

• UI mocks for auctions/tenders in portal fallback when explicit and isolated
• session-local logistics request drafts
• deterministic stub embeddings when OpenAI keys are absent

Dangerous debt

• gateway fallback engines masquerading as canonical backend behavior
• stakeholder reviewer endpoints returning 501 while a real implementation exists elsewhere
• docs that imply cleaner boundaries than the code actually has