Guide

Dashboard

The dashboard is a local browser view of the store. It is useful for reading a case, comparing evidence, and simulating a remediation plan without typing every command.

Start the dashboard

shell

evd ui

# Choose a port or keep the browser closed.
evd ui --port 4317
evd ui --no-open

# Open the fixture demo instead of the default store.
evd ui --demo

The command prints a URL such as http://127.0.0.1:4317/#token=.... Open it in a local browser. The server stays in the foreground until you press Ctrl+C.

If the configured port is taken, the server falls back to a free port. Use the URL it prints instead of guessing the address.

What you can review

Timeline. Recent snapshots, runs, and cases in one stream.
Case file. The command, exit code, ranked findings, all changes, origin labels, evidence details, and a remediation preview.
Runs. Recorded commands with their before and after snapshots.
Baselines. The active known-good reference and recent baselines.
Settings. Store and redaction settings that apply to reports.

The case file can export a report with standard or strict redaction. The dashboard uses the same case data as the HTML report, so you can inspect a finding before you share it.

Rollback in the dashboard

The dashboard previews a rollback plan and can simulate the actions. It has no apply button. Apply from the CLI for the supported flow:

shell

evd rollback --case CASE-... --dry-run
evd rollback --case CASE-... --apply

This keeps the plan, the confirmation prompt, and the safety snapshot in one place. Read Rollback before using --apply.

Local server controls

The server binds to 127.0.0.1. It generates a random token for each server process and places it in the URL fragment. The browser stores the token in sessionStorage and sends it with API requests.

Requests without the session token are rejected.
POST requests must come from the same loopback origin.
Host headers other than loopback are rejected.
The UI has no remote scripts, fonts, images, or connections.

Do not expose the dashboard

The token is not a password and the server is not designed for remote access. Do not port-forward it, put it behind a public reverse proxy, or share its URL. Close the terminal when you are finished.

Troubleshooting

The page shows a token error. Use the full URL printed by evd ui. The token changes each time the server starts.
The browser did not open. The command still prints the URL. Open it manually.
The page is stale after an update. Stop the server and run evd ui again.
The dashboard shows no data. Check the store path and run evd doctor.

For the full security model, see Security.