iSight — Sole Admin Master Access & Time Management Center

🎭

Active Simulation Mode: Previewing terminal as Marcus Vance (Junior Trader)

👥

Team Directory 3 Accounts 1 Admin • 1 Analyst • 1 Trader

⏱️

TBAC Time Access 100% Active 0 Expired • 0 Expiring Soon

🛡️

Data Safeguard Status 100% Secured 0 Snapshots • Zero-Loss Lock

🔑

Invites Engine 3 Pending Time-gated & market-scoped

🔔

Reset Requests 0 Pending Click to view & safe-resolve

👥 Institutional Team Directory & Time Controls

Inspect live account status, assign market permissions, extend TBAC windows, and manage team member access.

Team Member & Tenant Vault	Assigned Role	TBAC Expiration Window	Permitted Markets	Account Status	Linked Integrations	Sole Admin Controls

🛡️

Enterprise Zero-Data-Loss Guarantee & Safe Account Reset AUDITED SAFEGUARD ACTIVE

Resetting a team member's account refreshes their authentication credentials and lifts any time expirations or lockouts. All underlying trade ledgers, historical forensic P&L, broker and DEX API credentials, custom TradingView sensei drawings, and workspace preferences are cryptographically anchored to their Tenant ID and remain 100% intact, secured, and zero-loss protected.

✓ Trade Journal & Balances Preserved

✓ Broker & DEX API Keys Untouched

✓ Custom Indicator Layouts Retained

✓ Automated Pre-Reset Backup Snapshot

🔔 Pending Reset Requests from Login Portal

Incoming requests submitted by team members when locked out.

User / Account	Requested At	Status	Action

⚡ Direct Safe Account Reset Console

Instantly reset any team member's password with automatic TBAC renewal.

Select Team Member Account:

Tenant ID: -- Role: --

Data Status: 100% Pinned (Zero Loss Safeguarded)

Replacement Password:

TBAC Duration Refresh:

Automatically lift any frozen or suspended status to ACTIVE Capture immutable snapshot to Account Backup Vault

🗄️ Immutable Account Backup & Recovery Vault

Automated snapshots captured prior to credential resets and administrative updates.

INSTANT ROLLBACK ENABLED

Backup ID	User / Email	Captured At	Role at Snapshot	Action

🔑 Create Time-Gated & Scoped Team Invite

Issue cryptographic redemption tokens scoped to specific roles, durations, and permitted markets.

Assigned Role:

Access Duration (Time-Gated):

Permitted Markets Scope:

🪙 Crypto 🏛️ Stocks & Indexes 💱 Forex 🏆 Commodities

📋 Master Invite Ledger & Redemption Audit

Track active invites, redemptions, and revoke pending codes.

Invite Code	Role	Duration	Permitted Markets	Created By / Date	Status	Redeemed By	Action

📜 Immutable Access & Security Audit Trail

Cryptographic audit trail of all authentications, safe account resets, TBAC time extensions, and status changes.

Timestamp	Event Type	Actor / Account	Audit Details

🌐 Google Workspace SSO & RFC 6238 TOTP 2FA Hub

Institutional OAuth 2.0 / OIDC identity binding, hosted domain (hd: isight.trade), and rotating 6-digit TOTP.

● GOOGLE OAUTH ACTIVE

OAuth 2.0 Engine

Google Identity (GSI)

oauth2-proxy & RS256 JWT

Enterprise Hosted Domain

hd: isight.trade

Workspace Multi-Tenant Binding

2FA / MFA Engine

Google Authenticator

RFC 6238 6-Digit TOTP (30s)

Gmail OAuth Linking

Active Gateway

Teammate Profile Association

📧 Gmail Account Profile Association

Allow team members to link personal or corporate Gmail addresses for 1-click Google Sign-In and notifications.

When a team member links their Gmail address, they can authenticate via Google Identity Services without passwords while retaining full RBAC scoping and TBAC expiration timers.

Select Member to Link Gmail:

Gmail Address:

📈 TradingView Profile & Alert Webhook Link

Associate official TradingView profiles for Pine Script sharing, public chart sync, and webhook order alerts.

Links each team member's TradingView handle (`@username`) with their assigned Bot Daemon profile and order execution webhook listener (`/api/alerts/tradingview`).

Select Member to Link TradingView:

TradingView Profile Handle:

Webhook Endpoint: https://isight.trade/api/alerts/tradingview

Google Workspace & Gmail Registration Whitelist

Zero-Trust Perimeter: Only authorized Gmail or Google Workspace accounts listed below can register and access this terminal. All unlisted accounts are strictly denied access.

● ZERO-TRUST WHITELIST ACTIVE

Total Authorized Accounts

Permitted to sign in

Registered & Active

Completed first Google login

Pending First Login

Awaiting trader onboarding

Perimeter Policy

🛡️ Strict Zero-Trust

Unlisted Gmail strictly blocked

➕ Authorize New Gmail or Google Workspace Account

Pre-provision authorized email addresses. When the user signs in with Google, their terminal profile is automatically initialized with the role, TBAC expiration, and desk notes configured below. (Accepts single email or comma/newline separated list).

Gmail / Google Email(s):

Assigned Role:

TBAC Expiration:

Desk / Counterparty Note:

Authorized Google Account	Assigned Role	TBAC Expiration	Perimeter Status	Desk Note / Date Added	Actions

Sole Admin Master Clearance Required