Institutional Console
Licensed Mode 0–3 operations with separated address, aperture, verification, rights, evidence, and clinical roles.
Console · HMI · Authorization · Safe Collapse
Temporal Viewer Console
The operator and citizen interface architecture for temporal observation: event addressing, display honesty, authority separation, multimodal output, refusal logic, evidence custody, and safe collapse.
Human-System Interface
Evidence before imagery.
The console is designed so a beautiful image can never hide whether the scene is direct, reconstructed, uncertain, private, unauthorized, or causally unsafe. Mode, uncertainty, recording status, rights tier, causal margin, and the safe-collapse path remain visible without opening another panel.
Audit / Tribunal Console
Read-only replay of evidence, reconstruction versions, operator actions, dissent, and disclosure history.
Field / Citizen Units
Capability is deliberately reduced. Citizen experiences receive curated packages and never expose aperture-steering controls.
Console design language
Staged commitment and refusal
An event can be technically reachable without being lawful to observe. The interface therefore separates target discovery, authentication, rights review, mode selection, aperture alignment, recording, disclosure, and closure into independent stages.
Authenticated Event Address
Reference frame, clock ancestry, event identity, uncertainty volume, and authority are resolved before alignment.
Display Honesty
Direct acquisition, constrained reconstruction, unknown or withheld regions, identity confidence, temporal uncertainty, and causal margin use different visual grammar.
Safe Collapse
Refusal and closure remain independent of operator desire. Emergency closure cannot be reassigned to preserve a session.
Design thesis: a temporal console is an instrument of evidence, rights, and causal restraint. It must never disguise reconstruction as observation, access as permission, or cinematic completeness as truth.