Every layer below is a real engineering surface with its own protocols, contracts, and failure modes. The stack is designed so operations pays for the sensors, and valuation emerges as a signed by-product of data we were already paid to collect.
Seven dashboards ordered by who pays: FM, Bank, REIT, Insurer, Developer, Valuer, Platform admin.
Seven role-scoped surfaces sit on top of the same spine. Facility Managers see BHI, alerts, work orders, and silent devices. Banks see LTV headroom against a live-measured value. REITs see portfolio-level BHI benchmarks. Insurers see risk deltas tied to loss expectancy. Developers see fit-out vs occupancy signals. Valuers get a workbench that assembles the signed report. Platform admins manage tenancy, policies, and integrations. Every surface reads through Postgres row-level security views — no bespoke API glue, one policy layer, seven experiences.
User role · organisation · query parameters.
RLS view materialises role-appropriate slice → UI composes KPIs.
Role-scoped dashboard, alerts, exports, and signed reports.