D. DWARPAL SIMULATED HOME-SERVICE WORKFLOW DEMO SYSTEM · NO REAL LOCKS
ALEXA+ STYLE SIMULATION · HOME SERVICE ACTION GOVERNANCE

BEFORE AI
ACTS.
MAKE IT
PROVE THE
HANDOFF.

Before an assistant acts, DWARPAL proves what was requested, who approved it, and what scope is allowed.

START DEMO SCENARIO ↘ EXPLORE 7-STEP WORKFLOW ↘
SYSTEM STATUS & INTEGRATION TRACE
Local Demo Policy: available
MCP Streamable HTTP: checking…
AWS Verified Permissions: not configured
Bedrock / Strands: not configured
GATEWAY 🛡️ CANONICAL
PLAN BINDING
INTENT BINDING EXACT PLAN
HASH-CHECK SHA-256 CANONICAL
SAFETY GATE FAIL-CLOSED
POLICY NO BLIND ACCESS
INTENT IS NOT
AUTHORITY.
PROPOSAL → INTEGRITY → HUMAN GATE → SCOPE
NO ACTION WITHOUT CONTEXT ✳ NO ACCESS WITHOUT AUTHORIZATION ✳ NO CLAIM WITHOUT EVIDENCE ✳ NO DISPATCH WITHOUT APPROVAL ✳
01 / BOUNDED SCENARIOS

DEMO PRESETS.

Select a 1-click preset. Presets run through the exact same server-side authorization and cryptographic digest checks as manual interaction.

SCENARIO A

SAFE APPROVED PATH

Valid case, proposal generated, homeowner provides simulated identity, and approves the exact canonical plan hash.

EXPECTED RESULT: ALLOW · 15-MIN PREVIEW
SCENARIO B

MISSING APPROVAL GATE

Repair plan is prepared, but simulated resident identity is missing. Policy fails closed and denies access preview.

EXPECTED RESULT: DENIED · FAIL-CLOSED
SCENARIO C

TAMPERED PLAN HASH

Approval is submitted with a modified hash or altered scope. The server detects the integrity violation and refuses execution.

EXPECTED RESULT: DENIED · HASH MISMATCH
SCENARIO D

REPLAY PREVENTION

An approved plan is submitted a second time. The server rejects double finalization as ALREADY_FINALIZED.

EXPECTED RESULT: REPLAY REJECTED
02 / END-TO-END STATE MACHINE

ACTION ORCHESTRATION.

Watch DWARPAL transition through 7 explicit lifecycle stages. Approval is strictly bound to the canonical JSON digest of the requested action and scope.

WORKFLOW TIMELINE READY
01
CASE CONTEXT LOADED

Read case details & check reader role.

READY
02
MAINTENANCE PROPOSAL CREATED

Log intent without external dispatch.

READY
03
PLAN PREVIEW READY

Compute deterministic SHA-256 digest.

READY
04
AWAITING HOMEOWNER APPROVAL

Explicit human-in-the-loop gate.

READY
05
POLICY EVALUATED

Fail-closed authorization evaluation.

READY
06
ACCESS SCOPE PREVIEWED

Narrow 1-entry 15-min grant (simulated).

READY
07
AUDIT RECEIPT READY

Receipt appended to SQLite store.

READY
CONFIGURE HOMEOWNER REQUEST STEP 1 & 2 TRIGGER
HUMAN APPROVAL GATE (STEP 4) UNTRUSTED DEMO INPUTS
DECISION PROVENANCE WHY DID DWARPAL DECIDE THIS?
🔍
NO ACTIVE DECISION

Prepare and approve a plan to view the full evidence trail and facts used.

CRITICAL SAFETY BOUNDARY

DWARPAL is an action-governance simulator. No real locks are unlocked, no contractor is contacted, and no municipal service is dispatched.

Inspect Raw JSON Response 
Workflow has not run yet.
03 / PRODUCT TRANSPARENCY

HOW IT WORKS.

A transparent breakdown of DWARPAL's request boundaries, policy adapters, and stores. Only verified components are marked live.

CLIENT LAYER

Browser / MCP Client

Untrusted input. Submits homeowner request or MCP tool call.

LIVE TESTED
➔
API GATEWAY

FastAPI / Lifespan

Validates typed schemas, mounts Streamable HTTP `/mcp` when installed.

LIVE TESTED
➔
POLICY ENGINE

Policy Adapter

Deterministic local fail-closed policy (default) or optional AWS AVP.

DETERMINISTIC LOCAL
➔
INTEGRITY BINDING

SQLite Demo Store

Stores canonical JSON, SHA-256 hash, and atomic 1-time approval state.

LOCAL DEMO STORE
➔
AUDIT LAYER

Audit Receipts

Structured, append-oriented log with UTC timestamps and reason codes.

APPEND-ORIENTED

WHAT IS LIVE & VERIFIED

  • Deterministic fail-closed local policy gate
  • SHA-256 canonical plan integrity binding
  • Atomic single-use approval transition
  • Replay and tamper detection
  • 7-step lifecycle state machine
  • Append-oriented SQLite audit trail

WHAT IS SIMULATED

  • Homeowner identity evidence (demo checkbox)
  • Physical door entry and smart locks
  • Plumbing contractor dispatch and scheduling
  • Fictional home-service case records

WHAT IS NOT CONFIGURED

  • Live AWS Verified Permissions policy store (needs AWS credentials)
  • Amazon Bedrock / Strands live model invocation
  • Native Alexa+ partner integration (simulated web route used)
04 / INTERACTIVE TOOL TESTING

THE ACTION LAB.

Test individual policy tools in isolation. Explore role authorization, case status lookup, and maintenance proposal creation.

TOOL 01 — ACCESS EVALUATIONLIVE DEMO
?
WAITING FOR INPUT

Run the scenario to reveal the policy result.

02
READ-ONLY TOOL

CASE STATUS.

Read a fictional home-service case, with role-based policy checks.

Awaiting request…
03
HUMAN-IN-THE-LOOP

PROPOSE ACTION.

Record a proposed maintenance action. External dispatch is intentionally disabled.

Nothing submitted yet.
05 / ACCOUNTABILITY & AUDIT

SHOW ME THE RECEIPTS.

UTC TIMESTAMP PRINCIPAL / ACTION DECISION & REASON CODE POLICY ENGINE / DETAILS
No events yet. Run a scenario above.

* Local demo audit trail uses SQLite append-oriented logging. In production, this would be supplemented by managed identity, Amazon CloudWatch/CloudTrail, and tamper-resistant storage.

06 / THE PHILOSOPHY

THE FUTURE IS
AGENTIC.
THE HANDOFF
MUST BE EXPLICIT.

AI assistants will increasingly coordinate actions across real-world physical and digital systems. DWARPAL makes the boundaries legible: what was requested, what policy evaluated, what hash bound the approval, and what receipt remains.

INTENT IS NOT
AUTHORITY.