Tenants
—
active
Open Alarms
—
across tenants
Events (24h)
—
processed
Devices
—
bound
Workspace Map
critical/high
medium/low
clean
No sites with coordinates yet — add lat/lng on the Locations form to plot.
Recent Alarms
View all →| Time | Severity | Type | Tenant |
|---|---|---|---|
| No alarms yet — start an adapter under Tenants. | |||
Pipeline Status
Correlation Enginerunning
NATS JetStreamconnected
Postgresconnected
Active Adapternone
v0.3 demo uses publicly accessible HLS sample streams mapped onto each tenant's locations. Click any tile for fullscreen.
Wallscreens
Saved camera-grid presets. Load one on the CCTV Wallscreen page for an instant view.
| Name | Description | Grid | Devices | Updated | Actions |
|---|---|---|---|---|---|
| Loading… | |||||
Available cameras
0Loading cameras…
Only cameras bound to a customer agent are listed. Click + to add.
Selected (in order)
0No cameras selected.
Use the up / down buttons to re-order tiles. The first slot is the top-left of the grid.
Live Alarm Queue
| Time | State | Severity | Type | Device | Actions |
|---|---|---|---|---|---|
| Select a tenant and click Connect to subscribe, or Load history to see open alarms. | |||||
Tenant-wide alarm rules
| Event type | Alarm name | Severity | Enabled | Actions |
|---|---|---|---|---|
| Loading… | ||||
New tenant-wide rule
Resolve alarm
All Tenants
| Slug | Display Name | Status | ID |
|---|
Provision Workspace
Platform admin only. Provisions a new tenant with default RBAC. Full Setup Wizard arrives in v0.2.
Start Adapter for Workspace
No adapter running.
Protocol-confidence legend — how trustworthy each adapter's vendor wire format is
Verified
— Open standard or fully-public vendor docs (Hikvision ISAPI, Dahua HTTP-API, ONVIF, SIA DC-09, Modbus TCP).
Semi-Verified
— Public docs exist; architecture is right but field names may need adjustment against a real device.
Pattern-Based
— Partner-only / NDA / undocumented. Plausible reconstruction — needs vendor-side validation before production.
Placeholder
— No real protocol code yet — honest stub / connectivity probe only.
Adapter Catalogue
All 46 device adapters across CCTV, Access, Fire, Intrusion, Perimeter, Intercom, LPR, Counter-UAS, Vehicle Barriers and BMS. For the grouped view, see Device Groups.
Ready
Not yet
Blocked
| Adapter | Group | Open protocols | SDK | Ready | Can be Done |
|---|
Incident lifecycle UI lands in v0.3 (UC-02). Backend state machine + audit chain already in place.
Audit Log (hash-chained per tenant, FR-AUD-04/05)
| Time | Category | Action | Resource | Result | Reason |
|---|---|---|---|---|---|
| Select a tenant and click Load. | |||||
My account
Signed in
Workspace Users
active workspace: —| Name | Role | Actions |
|---|
Invite User
Requires users.manage privilege. v0.2 replaces the inline-password with an emailed invite link.
Departments
workspace: —| Name | ID | Actions |
|---|
Create Department
Departments are organizational nodes at the top of the location tree. Locations and devices live underneath them. A User Group scoped to a department gets access to everything under it.
Location Types
All supported types that can appear in the location hierarchy. Adding a brand-new type requires a small DB migration today (the column is a Postgres enum) — UI-managed custom types come in v0.3.
Locations
All locations in this workspace. Use Edit to change a row's attributes, Delete to remove (must be empty), or switch to Tree view to see hierarchy.
Show:
| Type | Name | Parent | Lat / Lng | Layers | Created | Actions |
|---|
Edit Location
No child components yet — use the buttons above to add one.
Add component
Assign views to components
Map each extracted view to a Site / Building / Floor. Pick "Create new…" to make a component on the fly.
Drag a Site Component from the left to start
Device Layer:
Size:
×
Browse mode — markers are clickable, clicks on empty space do nothing.
No schematic uploaded for this location yet. Use Add Location or edit an existing one to upload a floor plan.
| Name / External ID | Type | Adapter | State |
|---|
Bound Devices
Devices bound in this workspace. Filter / search to narrow the list.
| Name / External ID | Type | Config State | Reading | Adapter | Location | Actions |
|---|
Are you sure?
Roles & Privileges
Platform admin only. Toggle a checkbox to grant or revoke a privilege; Save per row to commit. Changes apply on the next request.
My account
Signed in
Platform Users
All users across the platform. Click a row to edit attributes, password, level, workspace + group memberships. Platform admin only.
| Name | Level | Workspaces | Groups | Last login |
|---|
Edit user
Attributes
Level — Platform Admin
Reset Password
As platform admin you can set a new password without knowing the current one. The user will need to log in with the new password.
Workspace Access (Level 2 — workspace-wide role)
Group Memberships (Level 3 — department / subtree-scoped)
Groups carry their own role + location subtree scope. Group membership grants access only under the group's scope.
Device Groups
Adapter catalogue, bucketed by the kind of device they speak. Click a group to see every supported brand + protocol + KSA roadmap phase.
Upload Schematic Layer
Attached to the root location of this designer. PNG · JPG · SVG · PDF · ≤ 25 MB.
Drop a file here or click to choose
Adapter
Ready
Can be Done
SDK availability
Device types
Open protocols
Proprietary protocols / SDKs
Events emitted
KSA notes
User Groups
| Name | Role | Scope (subtree roots) | Members |
|---|
Create Group
Members get access to everything UNDER each picked node (locations.parent_id walk).
Tenant Adapters & Modules
Pick a workspace and toggle which adapters and modules it can use. Adapters become available on the Tenant Adapters runtime once enabled; modules unlock their sidebar entries.
Modules
| Module | What it unlocks | Enabled | Since |
|---|---|---|---|
| Pick a workspace. | |||
Adapters
| Adapter | Publisher | Device group | Phase | Enabled | Licence | Since |
|---|---|---|---|---|---|---|
| Pick a workspace. | ||||||
SIEM Bridge
Forward PSIM events to your SIEM (Splunk HEC / Sentinel / QRadar / syslog-CEF / generic webhook). Per-tenant outbound only.
| Name | Target | Endpoint | Enabled | Forwarded | Failed | Last attempt | |
|---|---|---|---|---|---|---|---|
| Loading… | |||||||
First-boot Setup Wizard arrives in v0.2 (ADR-26, FR-DEP-01..19). Sealed config storage already implemented.
Multi-dimensional SLA policy editor arrives in v0.3 (FR-CORE-10/13/14).
Encryption Policy — per Tenant × Field
Customer-controlled, PDPL-constrained. PDPL-classified fields are platform-locked and cannot be opted out of encryption (FR-CRYPTO-POLICY-04).
| Field Class | Default | PDPL-locked? |
|---|---|---|
| user.email | encrypted | yes — locked |
| user.mfa_secret | encrypted | yes — locked |
| device.credentials | encrypted | yes — locked |
| cardholder.name | encrypted | yes — locked |
| cardholder.badge_id | encrypted | yes — locked |
| cardholder.phone | encrypted | yes — locked |
| device.external_id | encrypted | no — customer-choosable |
| adapter.config | encrypted | no — customer-choosable |
| cardholder.photo_url | encrypted | no — customer-choosable |
| notes | encrypted | no — customer-choosable |
Per-tenant toggle UI arrives in v0.2. Backend already enforces both modes via storage version byte (`0x00` plain, `0x01` AES-256-GCM) — see ADR-28.
Multi-dimensional licence policy editor (per tenant × module × adapter × device-count × …) arrives in v0.3. v0.1 ships
LicenceGuard as a permissive default.
Tariff templates are billing plans. Each template has a base recurring fee (monthly / annual / one-time) plus optional variable components — per-device (overall or by group), per-site, per-event, per-adapter, per-operator-seat. Assign one template per tenant.
Tariff Templates
| Name | Currency | Base | Period | Components | VAT | |
|---|---|---|---|---|---|---|
| Loading… | ||||||
Invoices
One invoice per tenant per period. Lines are computed from the tenant's tariff + live device / site / event counts.
| Number | Status | Period | Subtotal | VAT | Total | |
|---|---|---|---|---|---|---|
| Pick a workspace to load invoices. | ||||||
Invoice Lines
| Meter | Description | Qty | Unit Price | Total |
|---|
SLA Templates
Reusable SLA definitions covering ack + resolve targets per event category, severity, and device kind. Assign these to locations or devices on the SLA Assignments page.
| Name | Owner | Rules | Actions | Description | |
|---|---|---|---|---|---|
| Loading… | |||||
Template detail
SLA Assignments
Bind a template to a location subtree or a single device. Closer scope wins (device > nearest ancestor > tenant default).
| Scope | Template | Created | |
|---|---|---|---|
| Pick a workspace to load assignments. | |||
SLA Violations
Every recorded breach (warning, ack breach, resolve breach) in the active workspace. Newest first.
| When | Kind | Template | Device | Location | Expected | Actual | |
|---|---|---|---|---|---|---|---|
| Pick a workspace to load violations. | |||||||
Services
| Name | Address | Status | Latency |
|---|---|---|---|
| Loading… | |||
Platform Counters
Loading…
DB Pool
Loading…
Adapter supervisor processes
| Device UUID | PID |
|---|---|
| No adapter processes running. | |
KEK Fingerprint
—
Customer Salt
—
Vault Backend
—
Tenant MEKs
| Slug | Tenant ID | MEK | Algorithm |
|---|---|---|---|
| Loading… | |||
Encrypted Column Coverage
| Column | Rows encrypted |
|---|---|
| Loading… | |
Parking facilities use the same location hierarchy as the rest of the platform — they're just
locations with one of the parking kinds (
parking_site · parking_garage ·
parking_floor · parking_zone). Schematic upload, device binding and
the Location Designer all work the same way as on a regular building.
Every parking-kind location is listed below with the path that contains it.
Parking
Drill down through your estate. Click a row that contains parking to dive in; click a parking node to open its schematic + slot canvas.
| Name | Kind | Schematic | Slots | Children | |
|---|---|---|---|---|---|
| Loading… | |||||
Parking site
Parking-kind components under this site. Click a component to open its location detail page — that's where the schematic upload, device binding and slot canvas live.
| Name | Kind | Schematic | Slots | |
|---|---|---|---|---|
| Loading… | ||||
Facility
Click empty canvas area to drop a slot. Click a slot to edit / remove.
Total
—
Free
—
Occupied
—
Unknown
—
Drop one slot at a time by clicking a free area on the canvas. Hold Shift when clicking a slot to delete it.
Sites
—
parking facilities
Total Slots
—
across all sites
Available
—
—%
Occupied
—
—%
Reserved
—
—%
Per-facility breakdown
| Facility | Total | Free | Occupied | Reserved | Unknown | Utilization |
|---|---|---|---|---|---|---|
| Loading… | ||||||
Live Occupancy
Each facility shows its live slot mix. Click a card to drill into the CAD view with live pins.
Loading…
All Parking Slots
Every slot across every facility in this workspace. Filter, search, override state, or bind a sensor device.
| Slot | Facility | Kind | State | Sensor | Last change | |
|---|---|---|---|---|---|---|
| Loading… | ||||||
Parking Gates
Entry / exit gates per facility. Bind a CCTV/LPR camera for auto plate-read at the ticket-print station, or leave unbound for manual-only operation.
| Name | Site | Direction | Linked Camera | Mode | Actions |
|---|---|---|---|---|---|
| Loading… | |||||
Parking Subscriptions
Monthly / hourly parking subscriptions tied to a workspace user, one or more vehicles, and a tariff template. Validity range is enforced at gate.
| User | Site | Plate(s) | Tariff | Valid From → To | Status | Actions |
|---|---|---|---|---|---|---|
| Loading… | ||||||
Parking Tickets — Print Station
Operator-facing ticket printer. Auto mode reads the latest plate from the gate's bound camera (last 60s) and matches active subscriptions; Manual mode prints a blank ticket the operator fills at exit.
Recent Tickets
| Ticket | Mode | Plate | Gate | Entry | Status | Amount | Actions |
|---|---|---|---|---|---|---|---|
| Pick a site to view tickets. | |||||||
Find a Car
Search license-plate reads across every LPR/ANPR-enabled camera on this workspace. Substring match, case-insensitive. Old reads are filtered out per the PDPL retention policy.
| Time | Plate | Camera / Device | Location | Direction | Confidence | Snapshot |
|---|---|---|---|---|---|---|
| Enter a plate and press Search. | ||||||
New Parking Facility
How can we help?
Search the documentation or browse topics below.
All Topics
— no topics match —
About this build
PSIM Platform — v0.1 walking skeleton
Built per: 27 ADRs, 15 architectural anti-patterns, ~170 functional + non-functional requirements.
Backend: Go services + Postgres + NATS JetStream + MinIO + per-tenant Vault encryption.
Adapter SDK: gRPC-style plugin protocol; first-party adapters in Go; partner adapters in any language.
Brand-agnostic per ADR-12 — every label on this page is configurable via env + CSS variables.
Built on Hetzner with customer-salt baked into every binary via
-ldflags per ADR-17. Served via psim.tahwol.com with Let's Encrypt TLS through nginx reverse proxy.