Game guide · source of truth
Ledger

WEB-214

Admin Security (demo): event feed, rule tiers + shadow mode + 2 % reversal limit from security.json, ban reviews (uphold/reduce/reverse, 7-day SLA, linked support requests), player reports, device watchlist

← Ledger

donestatus · web-admin
2✓ 1✗tests passed / failed
5.11Mtokens · 6 min
3evidence files · 508 kB

Evidence

From logs/evidence/WEB-214/. Click a thumbnail for the full image.

Images (3)

desktop/ban-reviews.png
desktop/ban-reviews.png · 164 kB
desktop/security-rules.png
desktop/security-rules.png · 152 kB
mobile/security-devices-mobile.png
mobile/security-devices-mobile.png · 192 kB

Tests

fail admin e2e: security (moderator events/rules read-only/report dismiss; ban review linked to a support request reversed → player restored; owner demotes a rule into shadow mode with step-up; support blocked; 5 tabs clean at all sizes) · 52.0 s · raw log$ cd apps/admin && pnpm build >/dev/null 2>&1 && ZOEN_EVIDENCE_TASK=WEB-214 pnpm exec playwright test tests/e2e/security.spec.ts --workers=1 --reporter=line
pass admin e2e: security after report-number fix (moderator flow, appeal reversal, rule demotion, support blocked, all sizes) · 37.5 s · raw log$ cd apps/admin && pnpm build >/dev/null 2>&1 && ZOEN_EVIDENCE_TASK=WEB-214 pnpm exec playwright test tests/e2e/security.spec.ts --workers=1 --reporter=line
pass admin e2e: security after copy fixes (2 %, singular counts), all sizes · 39.3 s · raw log$ cd apps/admin && pnpm build >/dev/null 2>&1 && ZOEN_EVIDENCE_TASK=WEB-214 pnpm exec playwright test tests/e2e/security.spec.ts --workers=1 --reporter=line

Notes

2026-10-04 22:12 UTC · Security (demo, moderation.read): Events (30-day KPIs, tier filter, outcome incl. shadow), Rules (security.json tiers, 30-day events/actions/reversal rate vs ruleQuality.maxReversalRate — bot_timing shows over the limit; owner/moderation.rules can demote or restore up to the data tier and set shadow days, critical with step-up), Ban reviews (open by due date with overdue flag, linked real support request by ban id, uphold/reduce/reverse → reversal restores + receipts), Reports (numbered, actioned/dismissed with reason), Device watchlist. Evidence: logs/evidence/WEB-214.