# Page Inventory

## `/` Home

Purpose: one-screen operational overview.  
Primary decision: what needs attention now?  
Allowed data: summary module status, max 3 KPIs/card, max 5 attention items.  
Forbidden data: exact Finance values, Health raw data, tables, iframes.  
Components: NeedsAttentionList, ModuleCard grid, ReportList, ActivityTimeline.  
Empty: `Alles ruhig.`  
Error: redacted module error.  
Loading: skeleton cards.  
Offline/degraded: module badge and StaleDataBanner.

## `/approvals`

Purpose: review pending synthetic/future approval packages.  
Primary decision: what can be previewed?  
Allowed data: approval status, title, safe summary.  
Forbidden data: confirm mutation in MVP, upload action, raw package internals.  
Components: ApprovalItem cards, BlockedActionNotice.  
Empty: no approvals open.

## `/reports`

Purpose: safe report index.  
Primary decision: which safe summary is available?  
Allowed data: synthetic/summary report metadata.  
Forbidden data: file links to Health/Finance sensitive reports in MVP.  
Components: ReportList, BlockedActionNotice.

## `/finance`

Purpose: future protected Finance module page.  
Primary decision: what finance review/status item needs action?  
Allowed data: counts/status/data quality.  
Forbidden data: exact values, transactions, account details, report files.  
Components: ModuleCard, KpiPill, SensitiveValue, StaleDataBanner.

## `/health`

Purpose: future protected Health summary page.  
Primary decision: is health pipeline/report/backup status okay?  
Allowed data: runtime present, pipeline status, freshness, review count.  
Forbidden data: labs, PDFs, Drive links, paths, symptoms, diary, nutrition text.  
Components: ModuleCard, StaleDataBanner, BlockedActionNotice.

## `/system`

Purpose: JARVIS/Gateway/safety status.  
Primary decision: is the command layer operational?  
Allowed data: gateway status, safety status, demo mode.  
Forbidden data: secrets, host internals, private paths.  
Components: StatusBadge, ActivityTimeline.

## `/settings`

Purpose: future local settings/help view.  
Primary decision: understand environment and safety mode.  
Allowed data: environment, demo mode, contract version.  
Forbidden data: secret values, real endpoint URLs if sensitive.  
Components: PageHeader, BlockedActionNotice.