IRIS Ops Studio

IRIS Ops Studio — verifiable operations for InterSystems IRIS
IRIS Ops Studio is a responsive operations console for the IRIS SysAdmin API, with guided changes, fresh preconditions and automatic readback verification. It combines process and task inspection, access-control workflows, web-application availability, command-palette navigation and an Incident Timeline. Its optional native log extension reads bounded pages of messages, System Monitor and alerts with independent authorization; journal and interoperability logs are not included.
Optional IRIS-native server guard (introduced in 1.3.0): A separate managed profile adds server-enforced READ_ONLY/SUSPENDED deployment states, per-workflow write approvals and native authorization. It covers four bounded workflows: wallet access policy, one enrolled eligible web application, custom test-role grants and selected membership of a disabled test account. The server revalidates the target and permissions, executes the approved change and reads the result back. Persistent operation receipts support investigation after an interruption or restart without resending an uncertain change. This guard does not cover the entire direct SysAdmin console.
New in 1.3.1: Managed-guard navigation has a fixed maximum one-hour session family. Bounded native access may renew read-only while the tab remains visible and idle; renewal never extends that deadline or repeats a write. Write approval remains workflow-specific (at most 60 seconds), and exact-target previews last at most 30 seconds. Navigation now shows only the four supported guarded areas: Wallet, Web apps, Access control and local Session journal. The README and jury evaluation route distinguish the safe demo, the full direct console and this optional guard. The v1.3.1 GitHub release carries the independently verifiable review ZIP and its SHA-256.
Evidence and limits: 270 passing JavaScript tests, 12 syntax checks, independent extract-and-verify of the exact v1.3.1 ZIP, and 18 native renewal checks on disposable IRIS Community 2026.2. A real browser session reached the one-hour boundary on the preceding local bundle. The exact new ZIP was not reinstalled for another live-IRIS pass; the separate scripted long-duration test remains unrun. Earlier v1.3.0 evidence includes 20 native-log tests and 38 integration checkpoints. Test counts are evidence, not a guarantee of zero defects or universal compatibility. The optional guard reports productionReady: false and is a bounded technical review package, not an in-place upgrade or a claim of general production readiness.
Installation choices: The standard IPM/Docker installation provides the full direct SysAdmin console and labeled Safe demo. The optional managed guard is a separate evaluation package requiring explicit native-administrator enrollment, operator identity and trusted TLS. It is not an automatic IPM upgrade or protection for every workspace. Production deployments, arbitrary active users, other IRIS variants and in-place upgrades have not been validated. The three existing videos remain version-labeled introductions to earlier console workflows; the new guard walkthrough is the written judge guide.