Surfaces
| Surface | Role | Port / path |
|---|---|---|
| Console | Admin: Operate + Explore | :8093 |
| Conversation UI | Non-admin commission: society/* models | Dev :3000; clients copilot.* → Conversation Gateway :8094/v1 |
| Conversation UI (alt) | Alternative chat UI in all environments | Dev :3080 UI / :3081 admin; clients chat.* / chat-admin.* |
CLI society | Install, diagnose, builder | workstation with the repo |
| Ontology catalog | RDF/SHACL catalog, not the live graph | Dev :8000; clients onto.<client> (OIDC); VPS relay :8010 |
The Console backend is the telemetry service (:8091), not an events-only bridge. Auth: OIDC identity provider. Real roles: admin, operator, member, viewer, service — enforced in the backend (ROLE_SCOPES).
The agent runtime dashboard (:7474) exists when START_AGENT_DASHBOARD=1; it is not the Console.